Description Lack of escaping leads to an XSS vulnerability in the update list view of com_installer. Remediation References CVE-2026-48952 Related Vulnerabilities MediaWiki Use of a Broken or Risky Cryptographic Algorithm Vulnerability (CVE-2021-31556) WordPress Plugin Another WordPress Classifieds Multiple Vulnerabilities (2.2.1) MySQL CVE-2024-20981 Vulnerability (CVE-2024-20981) Liferay Portal Incorrect Authorization Vulnerability (CVE-2025-43806) Joomla Cross-Site Request Forgery (CSRF) (CVE-2021-26033) Severity Medium Classification CVE-2026-48952 CWE-707 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N Tags Missing Update Known Vulnerabilities