CVE-2026-34416

Name of the Vulnerable Software and Affected Versions OSCAL-GUI (affected versions not specified)

Description Reflected cross-site scripting occurs when unauthenticated attackers execute arbitrary JavaScript in a victim's browser. This is achieved by injecting malicious input through the project request parameter. Attackers can craft a malicious URL with unsanitized input that breaks out of the JavaScript string and HTML attribute context within the body onload event handler, triggering script execution when the link is visited.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.