Phoca Maps — known CVE vulnerabilities

Every CVE whose affected-product data names Phoca Maps, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.

CVEs (1)

• CVE-2026-23900 — CVSS 6.5 (medium): Various stored XSS vulnerabilities in the maps- and icon rendering logic in Phoca Maps component 5.0.0-6.0.2 have been discovered.