CVE-2026-102786 — Vulnerability intelligence

—

Published: 2026-10-23T15:17:22.807

CVSS

8.6

CISA KEV

Not listed; not proof of no exploitation

Original source text (not a translation)

Joomla Extension - phoca.cz - Authenticated stored cross-site scripting through HTML attribute injection in Phoca Gallery 4.5.0 - 6.1.5

Sources

• CVE-2026-102786
• Original advisory