Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

2 records

Vendor: brian-ruf Clear all filters
TI-2026-26698 CVE-2026-34417 · GHSA-79q4-fp7f-qmxh

OSCAL-GUI Reflected XSS via project parameter in oscal-forms.php

Priority MEDIUM 56

OSCAL-GUI contains a reflected cross-site scripting vulnerability that allows unauthenticated attackers to execute arbitrary JavaScript in a victim's browser by injecting malicious content through the project request par…

CVSS 4.0MEDIUM 5.1 Network No auth User interaction EPSS 0.00168 Published 2026-06-09 No fix listed CWE-79
TI-2026-26697 CVE-2026-34416 · GHSA-6cgq-85j5-m2j8

OSCAL-GUI Reflected XSS via project parameter in oscal.php

Priority MEDIUM 56

OSCAL-GUI contains a reflected cross-site scripting vulnerability that allows unauthenticated attackers to execute arbitrary JavaScript in a victim's browser by injecting malicious input through the project request param…

CVSS 4.0MEDIUM 5.1 Network No auth User interaction EPSS 0.00199 Published 2026-06-09 No fix listed CWE-79