CVE-2026-48532 | GFI Archiver up to 15.12 File History Retention Policy Configuration FAARetentionPolicyWizard.aspx RetentionPolicyWizard.SaveAllConfigSettings policy name cross site scripting

July 23, 2026 Yanac

A vulnerability was found in GFI Archiver up to 15.12. It has been declared as problematic. This issue affects the function RetentionPolicyWizard.SaveAllConfigSettings of the file /Archiver/FAARetentionPolicyWizard.aspx of the component File History Retention Policy Configuration. Executing a manipulation of the argument policy name can lead to cross site scripting.

This vulnerability appears as CVE-2026-48532. The attack may be performed from remote. There is no available exploit.

It is recommended to upgrade the affected component.VulDB Recent EntriesRead More