3 matches found
CVE-2026-48538
GFI Archiver before 15.13 contains a stored cross-site scripting vulnerability in the default import settings configuration that allows authenticated attackers to inject arbitrary web script or HTML via the configured folders parameter to /Archiver/ImportSettingsWizard.ashx. The injected payload ...
5.4CVSS5AI score0.00235EPSS
SaveExploits0References3
CVE-2026-48538
GFI Archiver
5.4CVSS5.1AI score0.00235EPSS
SaveExploits0References2
PT-2026-64014
GFI Archiver before 15.13 contains a stored cross-site scripting vulnerability in the default import settings configuration that allows authenticated attackers to inject arbitrary web script or HTML via the configured folders parameter to /Archiver/ImportSettingsWizard.ashx. The injected payload ...
5.4CVSS5AI score0.00235EPSS
SaveExploits0References3
20