Description An improper access check allowed low privileged users to edit the task types of existing scheduler tasks. Remediation References CVE-2026-48900 Related Vulnerabilities Liferay DXP Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2025-62249) Joomla! Core 3.x.x SQL Injection (3.2.0 - 3.4.4) Next.js Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2026-44580) phpMyFAQ Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2022-3608) WordPress Plugin SEO Redirection-301 Redirect Manager Unspecified Vulnerability (8.7) Severity Medium Classification CVE-2026-48900 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N Tags Missing Update Known Vulnerabilities