Signal is active with 2 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
GFI Archiver before 15.13 contains a stored cross-site scripting vulnerability in the File History Retention Policy configuration that allows authenticated attackers to inject arbitrary web script or HTML via the policy name parameter to /Archiver/FAARetentionPolicyWizard.aspx. The injected payload is stored by RetentionPolicyWizard.SaveAllConfigSettings() without output encoding and is executed in the browsers of users who subsequently view the File History Retention Policies page.
Priority
LOW
Exploitation
NONE
PoC
NONE
Patch
NONE
Momentum
NONE
🚨*CVE* CVE-2026-48532 GFI Archiver before 15.13 contains a stored cross-site scripting vulnerability in the File History Retention Policy configuration that allows authenticated attackers … https://www.cve.org/CVERecord?id=CVE-2026-48532 ----- Traducción: CVE-2026-48532 GFI… http://infoflow.cloud`
Post summary
A concise disclosure of CVE‑2026‑48532 highlighting a stored XSS flaw in GFI Archiver and linking to the CVE record.
CVE-2026-48532 GFI Archiver before 15.13 contains a stored cross-site scripting vulnerability in the File History Retention Policy configuration that allows authenticated attackers … https://www.cve.org/CVERecord?id=CVE-2026-48532
Post summary
The post reports a stored XSS flaw in GFI Archiver versions before 15.13 that can be exploited by authenticated users via the File History Retention Policy configuration.