CVE-2026-48532 is a stored cross-site scripting vulnerability in GFI Archiver prior to version 15.13. The vulnerability exists in the File History Retention Policy configuration interface, specifically in the policy name parameter processed by RetentionPolicyWizard.SaveAllConfigSettings(). Because the input is not properly neutralized or encoded before storage and subsequent rendering, an authenticated attacker can inject malicious scripts that execute in the context of users viewing the File History Retention Policies page. This can lead to script execution in user browsers, potentially enabling session hijacking or other script-based attacks.

The vulnerability allows authenticated attackers to inject and store malicious scripts that execute in the browsers of users who view the affected configuration page. This can lead to unauthorized actions performed on behalf of users, theft of sensitive information, or other impacts typical of stored XSS vulnerabilities. The CVSS score of 5.1 indicates a medium severity impact with network attack vector, low attack complexity, and limited privileges required.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, restrict access to the File History Retention Policy configuration page to trusted users only and consider monitoring for suspicious activity related to this interface.