What is GHSA-vxh9-pjmh-2356?

GHSA-vxh9-pjmh-2356 is a security advisory published by GitHub Security Advisories with Medium severity. Wirtualna Uczelnia is vulnerable to Reflected Cross‑Site Scripting (XSS) due to insecure handling...

Which CVE IDs does GHSA-vxh9-pjmh-2356 cover?

GHSA-vxh9-pjmh-2356 covers the following CVE IDs: CVE-2026-34907. Each CVE has its own detail page on EchelonGraph Pulse with the synthesized EG score.

GHSA-vxh9-pjmh-2356Medium

Wirtualna Uczelnia is vulnerable to Reflected Cross‑Site Scripting (XSS) due to insecure handling...

Vendor

GitHub Security Advisories

Published

June 2, 2026

Last Modified

June 2, 2026

🔗 CVE IDs covered (1)

CVE-2026-34907 →

📋 Description

Wirtualna Uczelnia is vulnerable to Reflected Cross‑Site Scripting (XSS) due to insecure handling of the locale parameter across multiple endpoints. An attacker can craft a malicious URL with JavaScript embedded in the locale parameter and send it to a victim. When the victim opens the link, the injected script will be executed in their browser.

This issue affects Wirtualna Uczelnia versions up to wu#2016.437.295#0#20260327_105545

🔗 References (4)

https://nvd.nist.gov/vuln/detail/CVE-2026-34907
https://cert.pl/posts/2026/06/CVE-2026-34906
https://simple.com.pl/branze/edukacyjna
https://github.com/advisories/GHSA-vxh9-pjmh-2356