What is CVE-2026-48530?
GFI Archiver versions prior to 15.13 contain a stored cross-site scripting (XSS) vulnerability in the Classification Rules configuration. An authenticated attacker can inject arbitrary web script or HTML via the rule name and email criteria parameters. Users should upgrade to GFI Archiver version 15.13 or later to mitigate this risk.
Azərbaycanca: GFI Archiver proqramının 15.13 versiyasından əvvəlki versiyalarında 'Stored Cross-Site Scripting' zəifliyi aşkarlanıb. Bu, autentifikasiyadan keçmiş təcavüzkara Təsnifat Qaydaları konfiqurasiyasında 'rule name' və 'email criteria' parametrləri vasitəsilə ixtiyari skript yeritməyə imkan verir. GFI Archiver-i dərhal 15.13 və ya daha yuxarı versiyaya yeniləmək tövsiyə olunur.
Related CVEs
link basis: same weakness class CWE-79; shared vendor: GFI
FAQ2
What vulnerability was discovered in GFI Archiver and what is its type?
A Stored Cross-Site Scripting (XSS) vulnerability was discovered in GFI Archiver versions prior to 15.13. This vulnerability allows an authenticated attacker to inject arbitrary script via the Classification Rules configuration.
How can I protect against the Stored XSS vulnerability in GFI Archiver?
To mitigate the risk, it is recommended to immediately upgrade GFI Archiver to version 15.13 or later.
See also6
This explainer is AI-written from source data — skopnix's own reporting on this CVE; CVSS scores, vendors and versions are never invented. See NVD for the official record.