CVE-2026-65765

Joomla Extension - phoca.cz - Path Traversal vulnerability in Phoca Commander 1.0.0-6.1.1 - Improper limitation of paths for save and download actions lead to path traversal vulnerabilities.

Score

CVSS 4.0 6.9 Medium

Status

Deferred - security@joomla.org

Published

2026-07-27

Last modified

2026-10-24

Weaknesses

CWE-22

Affected products

• Phoca Commander Extension For Joomla (Phoca.cz)

References

• https://www.phoca.cz/phocacommander