Advisories · Technology

phoca.cz Phoca Gallery extension for Joomla.

Every CVE that names phoca.cz Phoca Gallery extension for Joomla among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.

CVE-2026-102786 CVE record

CVSS 8.6 High

Joomla Extension - phoca.cz - Authenticated stored cross-site scripting through HTML attribute injection in Phoca Gallery 4.5.0 - 6.1.5
- phoca.cz Phoca Gallery extension for Joomla
- Cross-site scripting (XSS)
Not analysed yet 23 Oct 2026