Vulnerabilities in phoca.cz

2 results
CVE-2025-54473CRITICALExtension - phoca.cz - Authenticated RCE vulnerability in Phoca Commander component 1.0.0-4.0.0 and 5.0.0-5.0.1 for JoomlaEPSS 0.4%CVE-2026-23900MEDIUMExtension - phoca.cz - Stored XSS vectors in Phoca Maps component 5.0.0 - 6.0.2 for JoomlaEPSS 0.2%