Advisories · Technology
phoca.cz Phoca Download extension for Joomla.
Every CVE that names phoca.cz Phoca Download extension for Joomla among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.
- CVSS 5.3 Medium
Joomla Extension - phoca.cz - CSRF in category management in Phoca Download 3.1.0 - 6.1.5
- phoca.cz Phoca Download extension for Joomla
- Cross-site request forgery (CSRF)
- CVSS 5.3 Medium
Joomla Extension - phoca.cz - Reflected XSS via the search GET parameter in Phoca Download 5.0.0-6.1.4
- phoca.cz Phoca Download extension for Joomla
- Cross-site scripting (XSS)
- CVSS 9.0 CriticalCritical · CVSS 9+
Joomla Extension - phoca.cz - Authenticated file upload in Phoca Downloads component < 6.1.3
- phoca.cz Phoca Download extension for Joomla
- Unrestricted file upload