Phoca.cz Phoca Cart Extension For Joomla
3 CVEs affecting Phoca.cz Phoca Cart Extension For Joomla. Latest disclosed: 2026-08-20. Critical: 0, High: 0.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2026-76565 | | 2026-08-20 | Joomla Extension - phoca.cz - Reflected XSS via price_from & price_to filter parameters in Phoca Cart 5.0.0-6.1.7 | |
CVE-2026-76564 | | 2026-08-20 | Joomla Extension - phoca.cz - Stored XSS via User-Agent header in Admin Order View in Phoca Cart 5.0.0-6.1.7 | |
CVE-2026-74251 | | 2026-08-16 | Joomla Extension - phoca.cz - Unauthenticated SQL injection via attribute filter in Phoca Cart 5.0.0-6.1.6 - The a[] (attribute) and s[] (specification) GET a… |