CVE-2026-76565 - Joomla Extension - phoca.cz - Reflected XSS via price_from & price_to filter parameters in Phoca Cart 5.0.0-6.1.7

Back Back to CVE browser

MEDIUM

Joomla Extension - phoca.cz - Reflected XSS via price_from & price_to filter parameters in Phoca Cart 5.0.0-6.1.7

Published Aug 20, 2026

5.3

MEDIUM

CVSS 4.0

EPSS 0.44%

Description

Joomla Extension - phoca.cz - Reflected XSS via price_from & price_to filter parameters in Phoca Cart 5.0.0-6.1.7

Affected products

Vendor Phoca.cz Product Phoca Cart extension for Joomla Default
unaffected
- Version
  5.0.0-6.1.7
  Status
  affected
  Constraints
  -

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor

Product

Default status

Versions

Phoca.cz

Phoca Cart extension for Joomla

unaffected

Version	Status	Constraints
5.0.0-6.1.7	affected	-

Remediation

No remediation recorded yet.

Weaknesses (1)

CWE-79

Cross-site Scripting (XSS)

References (2)

https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-63210
Advisory
https://www.phoca.cz/phocacart
product

Link	Providers	Tags
https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-63210		Advisory
https://www.phoca.cz/phocacart		product

Change history (0)

No recorded changes yet.

Sources

CVE.org / MITRE

Status PUBLISHED

Assigner Joomla

Published Aug 20, 2026

Updated Aug 21, 2026

Reserved Aug 19, 2026

Link CVE-2026-76565

CISA Vulnrichment

Updated Aug 20, 2026

NVD

Status Deferred

Modified Aug 26, 2026

Link CVE-2026-76565

Red Hat

Severity n/a

Public date n/a

Links CVE-2026-76565

ENISA EUVD

Assigner Joomla

Published Aug 20, 2026

Updated Aug 21, 2026

Exploited since n/a

Link EUVD-2026-63210

EUVD-2026-63210