Login Request a demo
PC
Product
Phoca Cart extension for Joomla
by phoca.cz · last CVE Oct 5, 2026
4
CVEs
0
On KEV
9.3
Max CVSS
1
New 30D
Vulnerabilities4In the news0Timeline
Severity mix
Critical 1High 2Medium 1Low 0
Severity
All severities4Critical1High2Medium1Low0
Exploitation
On CISA KEV0Exploited in the wild0
Watch

Add Phoca Cart extension for Joomla to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2026-76564
8.6
0%
Aug 20
Joomla Extension - phoca.cz - Stored XSS via User-Agent header in Admin Order View in Phoca Cart 5.0.0-6.1.7
Affected: 5.0.0-6.1.7
CVE-2026-102775
7.5
0%
Oct 5
Joomla Extension - phoca.cz - Authorisation bypass through user-controlled key (IDOR) in Order View in Phoca Cart 5.0.0 - 6.1.8
Affected: 5.0.0-6.1.8
Showing 2