CVE-2026-66491

Joomla Extension - phoca.cz - Arbitrary File Read in Phoca Commander 1.0.0-6.1.3 PUBLISHED

Description (CNA)

Joomla Extension - phoca.cz - Arbitrary File Read in Phoca Commander 1.0.0-6.1.3 - Improper limitation of paths in the getSource function lead to an arbitrary file read vulnerability.

Affected (CNA)

Vendor / product	Versions
phoca.cz / Phoca Commander extension for Joomla	affected 1.0.0-6.1.3

CWE

CWE-22

References

https://www.phoca.cz/phocacommander

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.