Phoca.cz Phoca Commander Extension For Joomla

2 CVEs affecting Phoca.cz Phoca Commander Extension For Joomla. Latest disclosed: 2026-07-27. Critical: 0, High: 0.

Top CVEs affecting Phoca.cz Phoca Commander Extension For Joomla
CVESeverityScorePublishedSummary
CVE-2026-657652026-07-27Joomla Extension - phoca.cz - Path Traversal vulnerability in Phoca Commander 1.0.0-6.1.1 - Improper limitation of paths for save and download actions lead to…
CVE-2026-657642026-07-27Joomla Extension - phoca.cz - Reflected XSS vulnerability in Phoca Commander 5.0.0-6.1.1 - Improper validation of user inputs lead to a reflective XSS vulnerab…