Lack of escaping leads to an XSS vulnerability in the update list view of com_installer.CreditsmeifukunReferenceshttps://developer.joomla.org/security-centre/1060-20260706-core-xss-in-com-installer.html