CVE-2026-102787
Joomla Extension - phoca.cz - CSRF in category management in Phoca Download 3.1.0 - 6.1.5
phoca.cz Phoca Download extension for JoomlaApplications & CMS
CVSS
5.3MediumExploitationNo known exploitationNot in CISA KEV, which does not prove it is unexploitedCISA KEV
Exploit odds (EPSS)No scoreNo FIRST EPSS score in this snapshot yet
Fixed inNone listedNo source names a fixed version yet
What fixes it
No source in this snapshot names a fixed version.
Reports 1
1 outlet mention it. Reports are not confirmation; each links to its source.
Affected versions 1
- Phoca Download extension for Joomlaaffected: 3.1.0-6.1.5CVE List