All 3 CVE vulnerabilities found in Phoca Cart extension for Joomla, with AI-generated Chinese analysis, references, and POCs.
Vendor: phoca.cz
| CVE ID | Title | CVSS | Severity | Published |
|---|---|---|---|---|
| CVE-2026-76564 | Joomla Extension - phoca.cz - Stored XSS via User-Agent header in Admin Order View in Phoca Cart 5.0.0-6.1.7 CWE-79 | 8.6 | High | 2026-08-20 |
| CVE-2026-76565 | Joomla Extension - phoca.cz - Reflected XSS via price_from & price_to filter parameters in Phoca Cart 5.0.0-6.1.7 CWE-79 | 5.3 | Medium | 2026-08-20 |
| CVE-2026-74251 | Joomla Extension - phoca.cz - Unauthenticated SQL injection via attribute filter in Phoca Cart 5.0.0-6.1.6 CWE-89 | 9.3 | Critical | 2026-08-16 |
All 3 known CVE vulnerabilities affecting Phoca Cart extension for Joomla with full Chinese analysis, references, and POCs where available.