Skip to content
OpenAdvisories

Vendor

brian-ruf

2 known vulnerabilities.

Products

OSCAL-GUI 2
All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • Medium 6.1
    CVE-2026-34417

    OSCAL-GUI Reflected XSS via project parameter in oscal-forms.php

    OSCAL-GUI contains a reflected cross-site scripting vulnerability that allows unauthenticated attackers to execute arbitrary JavaScript in a victim's browser by injecting malicious content through the project request parameter in oscal-forms.php. The paramete…

    brian-ruf OSCAL-GUI
  • Medium 6.1
    CVE-2026-34416

    OSCAL-GUI Reflected XSS via project parameter in oscal.php

    OSCAL-GUI contains a reflected cross-site scripting vulnerability that allows unauthenticated attackers to execute arbitrary JavaScript in a victim's browser by injecting malicious input through the project request parameter. Attackers can craft a malicious U…

    brian-ruf OSCAL-GUI