CVE-2026-34907EPSS p20.8%

CVE-2026-34907CVE-2026-34907

Description

Wirtualna Uczelnia is vulnerable to Reflected Cross‑Site Scripting (XSS) due to insecure handling of the locale parameter across multiple endpoints. An attacker can craft a malicious URL with JavaScript embedded in the locale parameter and send it to a victim. When the victim opens the link, the injected script will be executed in their browser. This issue affects Wirtualna Uczelnia versions up to wu#2016.437.295#0#20260327_105545

Scoring

EPSS0.29% probability of exploitation · percentile 20.8% · 2026-08-03T12:00:16Z
Last modified2026-07-22

Related by meaning· 6

Nearest entities by semantic similarity across the cs-graph corpus.

CVE
CVE-2026-34906
CVE
CVE-2026-35466
CVE
CVE-2026-45106
CVE
CVE-2026-9646
CVE
CVE-2025-24297
CVE
CVE-2024-11321
Sourced from NVD + FIRST.org EPSS. Curated for EU compliance use cases by Adam Lundqvist, Founder at SQUR.