CVE-2026-65762

The Phoca Guestbook extension for Joomla versions 5.0.0 to 6.1.0 is vulnerable to a reflected cross-site scripting (XSS) attack due to improper validation of user inputs. This vulnerability could allow attackers to inject malicious scripts, potentially compromising user sessions or redirecting users to malicious sites. Joomla administrators using affected versions should prioritize patching this vulnerability to protect their users and maintain the integrity of their web applications.