CVE-2026-48530 is a stored cross-site scripting vulnerability in GFI Archiver before version 15.13. It occurs in the Classification Rules configuration interface, specifically through the rule name and email criteria parameters submitted to /Archiver/CategorizationPolicyWizard.aspx. The injected script is saved by the CategorizationPolicyWizard.SaveAllConfigSettings() method without output encoding, leading to execution of arbitrary scripts in the context of users who access the Classification Rules page. This vulnerability requires authenticated access but does not require user interaction beyond viewing the page.

An authenticated attacker can inject and store malicious scripts that execute in the browsers of users who view the Classification Rules page. This can lead to theft of session tokens, unauthorized actions performed on behalf of users, or other script-based attacks within the context of the affected application. The vulnerability does not require elevated privileges beyond authentication and has a medium CVSS score of 5.1.

No official patch or remediation level is currently confirmed. Users should upgrade to version 15.13 or later once available, as versions prior to 15.13 are affected. Until a fix is applied, restrict access to the Classification Rules configuration page to trusted users only and monitor for suspicious activity. Check the vendor advisory regularly for updates on patch availability and official remediation guidance.