Skip to content
phoca.cz Phoca Cart extension for Joomla
-
CVE-2026-102775
High 8.7
Joomla Extension - phoca.cz - Authorisation bypass through user-controlled key (IDOR) in Order View in Phoca Cart 5.0.0 - 6.1.8
0.4%
-
CVE-2026-76564
High 8.6
Joomla Extension - phoca.cz - Stored XSS via User-Agent header in Admin Order View in Phoca Cart 5.0.0-6.1.7
0.4%
-
CVE-2026-76565
Medium 5.3
Joomla Extension - phoca.cz - Reflected XSS via price_from & price_to filter parameters in Phoca Cart 5.0.0-6.1.7
0.4%
-
CVE-2026-74251
Critical 9.3
Joomla Extension - phoca.cz - Unauthenticated SQL injection via attribute filter in Phoca Cart 5.0.0-6.1.6
0.4%