Phoca CVE debriefs

These pages are published after PatchSiren validates generated defensive summaries against stored public CVE and source evidence.

MEDIUM Phoca CVE published 2026-04-11

CVE-2026-23900

CVE-2026-23900 is a stored XSS vulnerability in Phoca Maps component versions 5.0.0-6.0.2. The vulnerability exists in the maps- and icon rendering logic. Defenders managing Phoca Maps installations should assess exposure, prioritize remediation, and verify fixes. Successful exploitation requires user interaction with maliciously crafted maps or icons. User interaction with vulnerable maps or icons could [truncated]