CVE-2026-48952

The vulnerability arises from inadequate input escaping in the update list view of the com_installer component, allowing for potential cross-site scripting (XSS) attacks. This could enable attackers to execute arbitrary scripts in the context of a user's session, potentially compromising sensitive information. Organizations utilizing this component should prioritize remediation to mitigate the risk of exploitation.