Description Lack of escaping leads to an XSS vulnerability in the update list view of com_installer. Remediation References CVE-2026-48952 Related Vulnerabilities MediaWiki CVE-2026-34092 Vulnerability (CVE-2026-34092) WordPress Plugin Smart Forms-when you need more than just a contact form Security Bypass (2.6.70) WordPress Plugin Rank Math SEO-Best SEO For WordPress To Increase Your SEO Traffic Security Bypass (1.0.27) WordPress Plugin wpDataTables-WordPress Data Table, Dynamic Tables & Table Charts (Premium) Security Bypass (6.3.2) WordPress Plugin Augmented reality Unspecified Vulnerability (1.2.0) Severity Medium Classification CVE-2026-48952 CWE-707 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N Tags Missing Update Known Vulnerabilities