Lack of output escaping leads to a XSS vector in the multilingual associations component.Creditsvnth4nhnt from CyStackAisle Research, Pavel KohoutReferenceshttps://developer.joomla.org/security-centre/1034-20260502-core-xss-in-com-associations.html