Lack of escaping leads to an XSS vulnerability in the update list view of com_installer.
{ "cpes": [ "cpe:2.3:a:joomla:joomla!:*:*:*:*:*:*:*:*" ], "severity": "Medium" }
"https://github.com/bitnami/vulndb/tree/main/data/joomla/BIT-joomla-2026-48952.json"