CVE-2026-34096: Guardian Language-System XSS via name Parameter in designer.php
Published Jul 1, 2026
·Updated
Guardian language-system fails to sanitize the name GET parameter before outputting it into an HTML input value attribute in designer.php (line 57). An authenticated attacker can craft a URL containing script tags that execute in the victim's browser session.
Affected Software
1 affected component
Guardian Language-System
Event History
Jul 1, 2026
CVE Published
via MITRE·03:53 PM
Data Sourced
via MITRE·03:53 PM
DescriptionSeverityWeakness
Data Sourced
via NVD·05:16 PM
DescriptionSeverityWeakness
Frequently Asked Questions
1
What is the severity of CVE-2026-34096?
The severity of CVE-2026-34096 is medium with a score of 4.6.
2
What type of vulnerability is CVE-2026-34096?
CVE-2026-34096 is classified as a Cross-Site Scripting (XSS) vulnerability.
3
How do I fix CVE-2026-34096?
To fix CVE-2026-34096, ensure proper sanitization and encoding of the name GET parameter before outputting it in HTML.
4
Who can exploit CVE-2026-34096?
An authenticated attacker can exploit CVE-2026-34096 to execute malicious scripts in the victim's browser session.
5
Where in the code does CVE-2026-34096 occur?
CVE-2026-34096 occurs in designer.php on line 57 where the name parameter is output into an HTML input value attribute.