VULNERABILITY INTELLIGENCE

CVE-2026-34096

CVSS score4.8 MEDIUM

EPSS probability0.24%

CISA KEVNot currently listed

Published2026-07-01

Last modified2026-10-25

Description

Guardian language-system fails to sanitize the name GET parameter before outputting it into an HTML input value attribute in designer.php (line 57). An authenticated attacker can craft a URL containing script tags that execute in the victim's browser session.