CVE-2026-48952

Joomla! Core - [20260706] - XSS in com_installer PUBLISHED

Description (CNA)

Lack of escaping leads to an XSS vulnerability in the update list view of com_installer.

Vendor / product	Versions
Joomla! Project / Joomla! CMS	affected 4.0.0-5.4.6; affected 6.0.0-6.1.1

CWE-79

CISA-ADP

No English description supplied.

No references supplied.