CVE-2026-48905

Published: May 26, 2026

Modified: May 27, 2026

PUBLISHED

Lack of input filtering leads to an XSS vector in the HTML filter code.

Vendor	Product	Versions
Joomla! Project	Joomla! Framework Filter package	affected `1.0.0-3.0.5` affected `4.0.0-4.0.1`

vendor-advisory

Security Training

Train your team to recognize and prevent security threats with our comprehensive security awareness program.

Vulnerability Scanning

Discover vulnerabilities in your applications and infrastructure before attackers do.