CVE-2026-48905

Impact

Lack of input filtering leads to an XSS vector in the HTML filter code.

Affected products

Weakness classification

References

• NVD record
• CVE.org record
• https://developer.joomla.org/security-centre/1052-20260520-framework-inadequate-content-filtering-within-the-cleanattributes-filter-code.html