{"id":"CVE-2026-102786","published":"2026-10-23T15:17:22.807","lastModified":"2026-10-23T19:57:42.660","description":"Joomla Extension - phoca.cz - Authenticated stored cross-site scripting through HTML attribute injection in Phoca Gallery 4.5.0 - 6.1.5","cvssScore":null,"cvssSeverity":null,"cvssVector":null,"cwes":["CWE-79"],"vendors":[],"products":[],"references":[{"url":"https://www.phoca.cz/","tags":[]}],"exploitRefs":[],"hasPoc":false,"ai":null}