CVE-2026-48534

CVE-2026-48534 affects GFI Archiver prior to 15.13. It is a stored XSS in the IMAP Server configuration via the server URL parameter to /Archiver/ImapServerWizard.aspx. The payload is stored by ImapServerWizard.SaveAllConfigSettings() without output encoding and can execute in browsers of users w...