CVE-2026-48201 is an unauthenticated Cross Site Scripting (XSS) vulnerability affecting Fast Velocity Minify versions up to and including 3.5.7. This vulnerability allows an attacker to inject malicious scripts without authentication, potentially impacting confidentiality, integrity, and availability. The vulnerability has a high severity with a CVSS score of 7.1.