CVE-2026-48950

A cross-site scripting (XSS) vulnerability exists in the file management view of com_templates due to insufficient input escaping. This flaw could allow an attacker to inject malicious scripts, potentially compromising user sessions or redirecting users to malicious sites. Organizations utilizing com_templates should prioritize remediation to protect against potential exploitation of this vulnerability.