CVE-2026-1434CWE-79

Reflected XSS in Omega-PSIR

Medium · published February 27, 2026

CVSS v4.0
5.1
EPSS
0%
Percentile
5.3
In the wild
Unconfirmed
What it is

Omega-PSIR is vulnerable to Reflected XSS via the lang parameter. An attacker can craft a malicious URL that, when opened, causes arbitrary JavaScript to execute in the victim’s browser.

This issue was fixed in 4.6.7.

The record
Technical detail
CVSS v4.0
5.1 · MEDIUM
Vector
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:N/VI:N/VA:N/SC:L/SI:L/SA:N
EPSS
0.00164 · 5.3th percentile
Weakness
CWE-79 · Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
Published
2026-02-27T10:32Z
EPSS history
Timeline
  • 27 FEB 10:32Z
    Reflected XSS in Omega-PSIR
    cvelistv5