Stored Cross-Site Scripting in GFI Archiver by GFI Software

CVE-2026-48532

What is CVE-2026-48532?

GFI Archiver prior to version 15.13 is susceptible to a stored cross-site scripting vulnerability. This issue originates from the File History Retention Policy configuration, which permits authenticated attackers to inject arbitrary web scripts or HTML through the policy name parameter in the /Archiver/FAARetentionPolicyWizard.aspx page. The malicious payload is saved without appropriate output encoding using the RetentionPolicyWizard.SaveAllConfigSettings() method. Consequently, users viewing the affected policies may unknowingly execute these scripts in their browsers, potently leading to data exfiltration or other web-based attacks.

References