Improper validation leads to a generic XSS vector in the language override feature.CreditsMorris Baumgarten-EgemoleReferenceshttps://developer.joomla.org/security-centre/1062-20260708-core-xss-through-language-overrides.html