CVE-2026-65764 - Joomla Extension - phoca.cz - Reflected XSS vulnerability in Phoca Maps 5.0.0-6.1.1

Back Back to CVE browser

MEDIUM

Joomla Extension - phoca.cz - Reflected XSS vulnerability in Phoca Maps 5.0.0-6.1.1

Published Jul 27, 2026

5.1

MEDIUM

CVSS 4.0

EPSS 0.44%

Description

Joomla Extension - phoca.cz - Reflected XSS vulnerability in Phoca Commander 5.0.0-6.1.1 - Improper validation of user inputs lead to a reflective XSS vulnerability.

Affected products

Vendor Phoca.cz Product Phoca Commander extension for Joomla Default
unaffected
- Version
  5.0.0-6.1.1
  Status
  affected
  Constraints
  -

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor

Product

Default status

Versions

Phoca.cz

Phoca Commander extension for Joomla

unaffected

Version	Status	Constraints
5.0.0-6.1.1	affected	-

Remediation

No remediation recorded yet.

Weaknesses (1)

CWE-79

Cross-site Scripting (XSS)

References (2)

https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-49127
Advisory
https://www.phoca.cz/phocacommander
product

Link	Providers	Tags
https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-49127		Advisory
https://www.phoca.cz/phocacommander		product

Change history (0)

No recorded changes yet.

Sources

CVE.org / MITRE

Status PUBLISHED

Assigner Joomla

Published Jul 27, 2026

Updated Jul 27, 2026

Reserved Jul 22, 2026

Link CVE-2026-65764

CISA Vulnrichment

Updated Jul 27, 2026

NVD

Status Deferred

Modified Jul 27, 2026

Link CVE-2026-65764

Red Hat

Severity n/a

Public date n/a

Links CVE-2026-65764

ENISA EUVD

Assigner Joomla

Published Jul 27, 2026

Updated Jul 27, 2026

Exploited since n/a

Link EUVD-2026-49127

EUVD-2026-49127