BIT-JOOMLA-2026-48950 Joomla! Core - [20260704] - XSS in com_templates

Lack of escaping leads to an XSS vulnerability in the file management view of comtemplates...

CVE-2026-48950

Lack of escaping leads to an XSS vulnerability in the file management view of comtemplates...

CVE-2026-48950

Lack of escaping leads to an XSS vulnerability in the file management view of comtemplates...

CVE-2026-48950 Joomla! Core - [20260704] - XSS in com_templates

Lack of escaping leads to an XSS vulnerability in the file management view of comtemplates...

CVE-2026-48950

CVE-2026-48950 affects Joomla! Core via the file management view in com_templates. The root cause is lack of escaping, enabling an XSS vulnerability. Multiple sources (NVD, CVE lists, and Joomla security advisory) confirm an XSS in the core component with the vulnerable entry labeled for core/com...

CVE-2026-48950 Joomla! Core - [20260704] - XSS in com_templates

Lack of escaping leads to an XSS vulnerability in the file management view of comtemplates...

EUVD-2026-42067

Lack of escaping leads to an XSS vulnerability in the file management view of comtemplates...

CVE-2026-48950

Lack of escaping leads to an XSS vulnerability in the file management view of comtemplates...

PT-2026-56223

Name of the Vulnerable Software and Affected Versions Joomla! Core affected versions not specified Description Lack of escaping in the file management view of the com templates component leads to a Cross-Site Scripting XSS issue. XSS is a flaw that allows an attacker to inject malicious scripts...

CVE-2026-48950: Improper Neutralization of Input During Web Page Generation

Lack of escaping leads to an XSS vulnerability in the file management view of comtemplates...

Why Application Security Should Be Considered An Enabler For Business

If you ask Alex, he won't admit being old-fashioned. He has been working in the IT industry for a while now and accepts that security is important for the business's health. But reluctant to take security as the business enabler. In today's environment, moving to digitization is a critical step...

CVE-2017-7338

A password management vulnerability in Fortinet FortiPortal versions 4.0.0 and below allows an attacker to carry out information disclosure via the FortiAnalyzer Management View...

CVE-2017-7338

A password management vulnerability in Fortinet FortiPortal versions 4.0.0 and below allows an attacker to carry out information disclosure via the FortiAnalyzer Management View...

Information disclosure

A password management vulnerability in Fortinet FortiPortal versions 4.0.0 and below allows an attacker to carry out information disclosure via the FortiAnalyzer Management View...

CVE-2017-7338: Exposure of Sensitive Information to an Unauthorized Actor

A password management vulnerability in Fortinet FortiPortal versions 4.0.0 and below allows an attacker to carry out information disclosure via the FortiAnalyzer Management View...

CVE-2017-7338

A password management vulnerability in Fortinet FortiPortal versions 4.0.0 and below allows an attacker to carry out information disclosure via the FortiAnalyzer Management View...

PT-2017-17672

Name of the Vulnerable Software and Affected Versions Fortinet FortiPortal versions 4.0.0 and below Description A password management issue allows an attacker to carry out information disclosure via the FortiAnalyzer Management View. Recommendations For Fortinet FortiPortal versions 4.0.0 and...

CVE-2009-4777: Undefined Security Weakness

Unspecified vulnerability in multiple versions of Hitachi JP1/Automatic Job Management System 2 - View, JP1/Integrated Management - View, and JP1/Cm2/SNMP System Observer, allows remote attackers to cause a denial of service "abnormal" termination via vectors related to the display of an "invalid...