CVE-2026-48949: Improper Neutralization of Input During Web Page Generation

Lack of validation leads to an XSS vulnerability in the MFA management views...