Phoca.cz Phoca Commander Extension For Joomla
5 CVEs affecting Phoca.cz Phoca Commander Extension For Joomla. Latest disclosed: 2026-08-07. Critical: 0, High: 0.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2026-66493 | | 2026-08-07 | Joomla Extension - phoca.cz - Path Traversal vulnerability in Phoca Commander 1.0.0-6.1.3 - Improper limitation of paths for delete, copy and move actions lead… | |
CVE-2026-66492 | | 2026-08-07 | Joomla Extension - phoca.cz - Path Traversal vulnerability in Phoca Commander 1.0.0-6.1.3 - Improper limitation of paths in the file upload action lead to path… | |
CVE-2026-66491 | | 2026-08-07 | Joomla Extension - phoca.cz - Arbitrary File Read in Phoca Commander 1.0.0-6.1.3 - Improper limitation of paths in the getSource function lead to an arbitrary… | |
CVE-2026-65765 | | 2026-07-27 | Joomla Extension - phoca.cz - Path Traversal vulnerability in Phoca Commander 1.0.0-6.1.1 - Improper limitation of paths for save and download actions lead to… | |
CVE-2026-65764 | | 2026-07-27 | Joomla Extension - phoca.cz - Reflected XSS vulnerability in Phoca Commander 5.0.0-6.1.1 - Improper validation of user inputs lead to a reflective XSS vulnerab… |