Signal is active with 2 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
Various stored XSS vulnerabilities in the maps- and icon rendering logic in Phoca Maps component 5.0.0-6.0.2 have been discovered.
Priority
LOW
Exploitation
NONE
PoC
NONE
Patch
NONE
Momentum
NONE
If you run products in this scope, you should treat this CVE as relevant to your environment.
CVE-2026-23900 Various stored XSS vulnerabilities in the maps- and icon rendering logic in Phoca Maps component 5.0.0-6.0.2 have been discovered. https://www.cve.org/CVERecord?id=CVE-2026-23900
Post summary
XSS vulnerabilities have been identified in Phoca Maps component versions 5.0.0-6.0.2, but no PoC, exploit tool, active exploitation report, or patch information is provided.
CVE-2026-23900 Stored XSS Vulnerabilities in Phoca Maps Component 5.0.0-6.0.2 https://vulmon.com/vulnerabilitydetails?qid=CVE-2026-23900
Post summary
A stored XSS vulnerability (CVE-2026-23900) was disclosed affecting Phoca Maps component versions 5.0.0-6.0.2.
1 of 1 entries
| Part | Vendor | Product | Version | Target SW | Target HW |
|---|---|---|---|---|---|
| App | phoca | maps | - | - | - |