{"metadata": {"vulnerability": "CVE-2026-76565", "count": 19, "kinds": {"milestone": 4, "sighting": 7, "kev": 0, "other": 8}}, "data": [{"timestamp": "2026-08-19T13:27:07.456Z", "date_only": false, "value": "2026-08-19T13:27:07.456Z", "kind": "milestone", "label": "Reserved", "source": "cvelistv5", "record": "CVE-2026-76565", "field": "cveMetadata.dateReserved"}, {"timestamp": "2026-08-20T07:27:38.093Z", "date_only": false, "value": "2026-08-20T07:27:38.093Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2026-76565", "field": "cveMetadata.datePublished"}, {"timestamp": "2026-08-20T08:14:55.771Z", "date_only": false, "value": "2026-08-20T08:14:55.771542Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/4ux6zdcluqupc", "record": "CVE-2026-76565", "field": "creation_timestamp", "uuid": "8b553490-a246-468e-98dd-6e0c08ee711d", "content": "CVE-2026-76565 - Joomla Extension - phoca.cz - Reflected XSS via price_from & price_to filter parameters in Phoca Cart 5.0.0-6.1.7\nCVE ID : CVE-2026-76565\n \n Published : Aug. 20, 2026, 7:27 a.m. | 24\u00a0minutes ago\n \n Description : Joomla Extension - phoca.cz - Reflected XSS via ...", "url": "https://bsky.app/profile/cve.skyfleet.blue/post/4ux6zdcluqupc"}, {"timestamp": "2026-08-20T08:16:47Z", "date_only": false, "value": "2026-08-20T08:16:47Z", "kind": "other", "label": "Nvd published at", "source": "github \u00b7 GHSA-2M94-2F44-8Q5P", "record": "GHSA-2M94-2F44-8Q5P", "field": "database_specific.nvd_published_at"}, {"timestamp": "2026-08-20T08:16:47.900Z", "date_only": false, "value": "2026-08-20T08:16:47.900", "kind": "milestone", "label": "Published", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-76565", "record": "FKIE_CVE-2026-76565", "field": "published"}, {"timestamp": "2026-08-20T09:31:17Z", "date_only": false, "value": "2026-08-20T09:31:17Z", "kind": "milestone", "label": "Published", "source": "github \u00b7 GHSA-2M94-2F44-8Q5P", "record": "GHSA-2M94-2F44-8Q5P", "field": "published"}, {"timestamp": "2026-08-20T09:31:17Z", "date_only": false, "value": "2026-08-20T09:31:17Z", "kind": "other", "label": "Updated", "source": "github \u00b7 GHSA-2M94-2F44-8Q5P", "record": "GHSA-2M94-2F44-8Q5P", "field": "modified"}, {"timestamp": "2026-08-20T12:15:06.112Z", "date_only": false, "value": "2026-08-20T12:15:06.112462Z", "kind": "sighting", "label": "Seen", "source": "https://www.incibe.es/incibe-cert/alerta-temprana/vulnerabilidades/cve-2026-76565", "record": "CVE-2026-76565", "field": "creation_timestamp", "uuid": "2567426b-4869-445d-a2fe-49030d70156b", "url": "https://www.incibe.es/incibe-cert/alerta-temprana/vulnerabilidades/cve-2026-76565"}, {"timestamp": "2026-08-20T15:22:35.550Z", "date_only": false, "value": "2026-08-20T15:22:35.550617Z", "kind": "other", "label": "Recorded", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2026-76565", "field": "containers.adp.0.metrics.0.other.content.timestamp"}, {"timestamp": "2026-08-20T15:22:35.550Z", "date_only": false, "value": "2026-08-20T15:22:35.550617Z", "kind": "other", "label": "Recorded", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-76565", "record": "FKIE_CVE-2026-76565", "field": "metrics.ssvcV203.0.ssvcData.timestamp"}, {"timestamp": "2026-08-20T15:23:31.431Z", "date_only": false, "value": "2026-08-20T15:23:31.431Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2026-76565", "field": "containers.adp.0.providerMetadata.dateUpdated"}, {"timestamp": "2026-08-21T04:44:55.904Z", "date_only": false, "value": "2026-08-21T04:44:55.904Z", "kind": "other", "label": "Updated", "source": "cvelistv5", "record": "CVE-2026-76565", "field": "cveMetadata.dateUpdated"}, {"timestamp": "2026-08-21T04:44:55.904Z", "date_only": false, "value": "2026-08-21T04:44:55.904Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / Joomla", "record": "CVE-2026-76565", "field": "containers.cna.providerMetadata.dateUpdated"}, {"timestamp": "2026-08-22T00:00:09.658Z", "date_only": false, "value": "2026-08-22T00:00:09.658741Z", "kind": "sighting", "label": "Published proof of concept", "source": "Telegram/20v2IoyFQshDHts5_7Yn4T7Cia_Iss1KLurhB1ZSh0DbW1c", "record": "CVE-2026-76565", "field": "creation_timestamp", "uuid": "f7bdb948-c80a-43f9-b35d-064f258d0a22"}, {"timestamp": "2026-08-22T19:00:04.954Z", "date_only": false, "value": "2026-08-22T19:00:04.954837Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/GithubRedTeam/99100", "record": "CVE-2026-76565", "field": "creation_timestamp", "uuid": "fa07615e-0e58-4ad9-b4a7-1d72ed83c464", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #XSS #CVE #Reflected\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2026-76565\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a toanln-cov\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Unknown\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-08-21 17:14:25\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nReflected XSS via price_from & price_to Filter Parameters in PhocaCart\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "url": "https://t.me/GithubRedTeam/99100"}, {"timestamp": "2026-08-23T00:00:31.428Z", "date_only": false, "value": "2026-08-23T00:00:31.428780Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/GithubRedTeam/99100", "record": "CVE-2026-76565", "field": "creation_timestamp", "uuid": "ce043e99-fcee-498b-b4dd-1babdc455e09", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #XSS #CVE #Reflected\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2026-76565\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a toanln-cov\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Unknown\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-08-21 17:14:25\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nReflected XSS via price_from & price_to Filter Parameters in PhocaCart\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "url": "https://t.me/GithubRedTeam/99100"}, {"timestamp": "2026-08-24T18:16:27.552Z", "date_only": false, "value": "2026-08-24T18:16:27.552813Z", "kind": "sighting", "label": "Seen", "source": "https://infosec.exchange/users/DarkWebInformer/statuses/117151851235145822", "record": "CVE-2026-76565", "field": "creation_timestamp", "uuid": "acc1beec-05f2-4f79-864c-70851c4ecdea", "content": "\u203c\ufe0f CVE PoC Published: CVE-2026-76565 - Reflected XSS in PhocaCart\nGitHub: https://github.com/toanln-cov/CVE-2026-76565\nA proof-of-concept has been released for CVE-2026-76565, a reflected cross-site scripting (XSS) vulnerability affecting PhocaCart \u2264 6.1.7 for Joomla.\nThe vulnerability exists in the price_from and price_to filter parameters within the mod_phocacart_filter module. Due to improper output encoding, unauthenticated attackers can craft a malicious URL that injects JavaScript into the page when viewed by a victim.\nThe PoC demonstrates:\n\u2022 Reflected XSS through crafted GET parameters\u2022 Exploitation of vulnerable price filter inputs\u2022 Attribute-context injection caused by missing htmlspecialchars() encoding\u2022 No authentication requirement for exploitation\u2022 Affected versions: PhocaCart \u2264 6.1.7\u2022 Fixed version: PhocaCart 6.1.8\n\ud83d\udca5 No delays. No guessing. No redactions. Get the intel before everyone else with Dark Web Informer.", "url": "https://infosec.exchange/users/DarkWebInformer/statuses/117151851235145822"}, {"timestamp": "2026-08-25T01:55:46.607Z", "date_only": false, "value": "2026-08-25T01:55:46.607940Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/cvemon.bsky.social/post/3mtupnewzvx2j", "record": "CVE-2026-76565", "field": "creation_timestamp", "uuid": "99e7148e-68ab-436b-b5a1-21dd970aa01d", "content": "CVE-2026-76565 is trending. Hype score 6, currently #8 on cvemon.\n\nJoomla Extension - phoca.cz - Reflected XSS via price_from & price_to filter parameters in Phoca Cart 5.0.0-6.1.7\n\nhttps://cvemon.intruder.io/cves/CVE-2026-76565", "url": "https://bsky.app/profile/cvemon.bsky.social/post/3mtupnewzvx2j"}, {"timestamp": "2026-08-26T16:35:20.160Z", "date_only": false, "value": "2026-08-26T16:35:20.160", "kind": "other", "label": "Updated", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-76565", "record": "FKIE_CVE-2026-76565", "field": "lastModified"}]}