CVE-2026-65763

The Phoca Maps extension for Joomla versions 5.0.0 to 6.0.4 is vulnerable to a reflected cross-site scripting (XSS) attack due to improper validation of user inputs. This vulnerability allows attackers to inject malicious scripts, potentially compromising user sessions and data integrity. Joomla administrators and developers utilizing this extension should prioritize remediation to protect their applications from exploitation.