CVE-2026-48952

No fix known EPSS <1%CVSS 5.9

Lack of escaping leads to an XSS vulnerability in the update list view of com_installer.

Published 2026-07-07 · CVE record · OSV

Products: Joomla! Project Joomla! CMS