CVE-2026-102786 — Authenticated Stored Cross-Site Scripting in Phoca Gallery Through HTML Attribute Injection

CVE-2026-102786 is an authenticated stored cross-site scripting vulnerability in the Joomla extension Phoca Gallery, caused by HTML attribute injection. The source associates it with CWE-79.