CVE-2026-48949

Joomla! Core - [20260703] - XSS in MFA method management PUBLISHED

Description (CNA)

Lack of validation leads to an XSS vulnerability in the MFA management views.

Vendor / product	Versions
Joomla! Project / Joomla! CMS	affected 4.2.0-5.4.6; affected 6.0.0-6.1.1

CWE-79

CISA-ADP

No English description supplied.

No references supplied.