CVE-2026-76564 | Phoca Cart Extension up to 6.1.7 Admin Order View User-Agent cross site scripting

August 20, 2026 Yanac

A vulnerability has been found in Phoca Cart Extension up to 6.1.7 and classified as problematic. This vulnerability affects unknown code of the component Admin Order View. Performing a manipulation of the argument User-Agent results in cross site scripting.

This vulnerability is reported as CVE-2026-76564. The attack is possible to be carried out remotely. No exploit exists.VulDB Recent EntriesRead More