CVE-2026-48531 | GFI Archiver up to 15.12 Retention Policy RetentionPolicyWizard.aspx RetentionPolicyWizard.SaveAllConfigSettings policy name cross site scripting

July 23, 2026 Yanac

A vulnerability was found in GFI Archiver up to 15.12. It has been classified as problematic. This vulnerability affects the function RetentionPolicyWizard.SaveAllConfigSettings of the file /Archiver/RetentionPolicyWizard.aspx of the component Retention Policy. Performing a manipulation of the argument policy name results in cross site scripting.

This vulnerability is reported as CVE-2026-48531. The attack is possible to be carried out remotely. No exploit exists.

Upgrading the affected component is recommended.VulDB Recent EntriesRead More