Read the docs

phoca.cz

Records18All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical3CVSS 9.0–10.0
CVSS high5CVSS 7.0–8.9

Exploited now

phoca.cz records in CISA KEV

No phoca.cz vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Com Phocadocumentation 1 record LOW Download 1 record MEDIUM Maps 1 record LOW Phoca Cart 1 record MEDIUM

Records

1 record in Download · all components

TI-2026-41646 CVE-2026-57828 · GHSA-wjv4-xh6c-w4j7

Unrestricted file upload in phoca.cz Phoca Download extension for Joomla

Priority MEDIUM 42

Joomla Extension - phoca.cz - Authenticated file upload in Phoca Downloads component < 6.1.3 - The Joomla extension Phoca Downloads is vulnerable to an authenticated arbitrary file upload that allows registered users upl…

CVSS 4.0CRITICAL 9.0 Network Low privileges No interaction EPSS 0.00543 Published 2026-07-11 No fix listed CWE-434
Open these records in search →