CVE-2026-48901

No fix known EPSS <1%CVSS 7.5

The InputFilter::getInstance() method omitted a security sensitive parameter from the instance cache key.

Published 2026-05-26 · CVE record · OSV

Products: Joomla! Project Joomla! CMS