Path Traversal in Phoca.cz Phoca Commander Extension For Joomla

CVE-2026-65765

Joomla Extension - phoca.cz - Path Traversal vulnerability in Phoca Commander 1.0.0-6.1.1 - Improper limitation of paths for save and download actions lead to path traversal vulnerabilities.

Vulnerability class: Path Traversal (Directory Traversal)

EPSS: 0.003 (23.9th percentile) — read the EPSS interpretation.

Affected products

Weakness classification (CWE)

References