Description
Guardian language-system fails to sanitize the name GET parameter before outputting it into an HTML input value attribute in designer.php (line 57). An authenticated attacker can craft a URL containing script tags that execute in the victim's browser session.
Published: 2026-07-01
Score: 4.8 Medium
EPSS: < 1% Very Low
KEV: No
Impact: n/a
Action: n/a
AI Analysis

Impact

The flaw allows an authenticated user to craft a URL that includes script tags in the name query parameter. Because the application fails to sanitize that value before inserting it into an HTML input field, the browser executes the embedded JavaScript within the victim’s session. This can result in theft of session cookies, malicious redirection, or unauthorized manipulation of page content.

Affected Systems

All installations of the Guardian Language‑System that include the designer.php page and have not applied the vendor’s fix are affected. The vulnerability description does not specify a version range, so any deployment running the unpatched code is at risk.

Risk and Exploitability

The CVSS score of 4.8 reflects moderate severity. An EPSS score of less than 1 % indicates a low likelihood of exploitation in the wild. The flaw is not listed in the CISA KEV catalog. Exploitation requires an attacker to be authenticated and capable of requesting designer.php, and the impact is confined to client‑side operations within the user’s browser.

Generated by OpenCVE AI on July 21, 2026 at 14:01 UTC.

Remediation

No vendor fix or workaround currently provided.

OpenCVE Recommended Actions

  • Check the guardian:language-system vendor website or product documentation for available updates that address this XSS flaw, and install the latest release when available.
  • If no update is available, modify designer.php to escape or URL‑encode the value of the name GET parameter before inserting it into the input value attribute so that any script tags are rendered harmless.
  • Implement a Web Application Firewall rule or similar request filtering to block or neutralize requests to designer.php that contain script tags or other suspicious code in the name parameter.

Generated by OpenCVE AI on July 21, 2026 at 14:01 UTC.

Tracking

Sign in to view the affected projects.

Advisories

No advisories yet.

History

Mon, 06 Jul 2026 23:15:00 +0000

Type Values Removed Values Added
First Time appeared Guardian
Guardian language-system
Vendors & Products Guardian
Guardian language-system

Wed, 01 Jul 2026 19:30:00 +0000

Type Values Removed Values Added
Metrics ssvc

{'options': {'Automatable': 'no', 'Exploitation': 'poc', 'Technical Impact': 'partial'}, 'version': '2.0.3'}

Wed, 01 Jul 2026 16:30:00 +0000

Type Values Removed Values Added
Description Guardian language-system fails to sanitize the name GET parameter before outputting it into an HTML input value attribute in designer.php (line 57). An authenticated attacker can craft a URL containing script tags that execute in the victim's browser session.
Title Guardian Language-System XSS via name Parameter in designer.php
Weaknesses CWE-79
References
Metrics cvssV3_1

{'score': 4.6, 'vector': 'CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:L/I:L/A:N'}

cvssV4_0

{'score': 4.8, 'vector': 'CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:A/VC:N/VI:N/VA:N/SC:L/SI:L/SA:N'}

Subscriptions

Guardian Language-system
cve-icon MITRE

Status: PUBLISHED

Assigner: VulnCheck

Published:

Updated: 2026-07-14T18:40:12.697Z

Reserved: 2026-03-25T18:43:09.825Z

Link: CVE-2026-34096

cve-icon Vulnrichment

Updated: 2026-07-01T17:52:46.386Z

cve-icon NVD

No data.

cve-icon Redhat

No data.

cve-icon OpenCVE Enrichment

Updated: 2026-07-21T14:15:04Z

Weaknesses
  • CWE-79

    Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')