CVE-2026-23900
Various stored XSS vulnerabilities in the maps- and icon rendering logic in Phoca Maps component 5.0.0-6.0.2 have been discovered.
Published Apr 11, 2026 · updated Jun 17, 2026 · phoca maps
Various stored XSS vulnerabilities in the maps- and icon rendering logic in Phoca Maps component 5.0.0-6.0.2 have been discovered.
Code
The project this record applies to. Exploit listings stay in References.
No public source repository is identified for this product.
Timeline
Detection, updates, and resolution for this record.
Apr 11, 2026 · NIST NVD
Detected
Various stored XSS vulnerabilities in the maps- and icon rendering logic in Phoca Maps component 5.0.0-6.0.2 have been discovered.
Jun 17, 2026 · NIST NVD
Updated
Various stored XSS vulnerabilities in the maps- and icon rendering logic in Phoca Maps component 5.0.0-6.0.2 have been discovered.
Affected
- cpe phoca/mapsversion unspecified
Sources
- CVE.orgVulnerability recordCVE-2026-23900
Official CVE identifier
cve.org - NIST NVDVulnerability recordCVE-2026-23900
Various stored XSS vulnerabilities in the maps- and icon rendering logic in Phoca Maps component 5.0.0-6.0.2 have been discovered.
nvd.nist.gov