Pw vulnerabilities
Published CVEs affecting Pw products: 1 record(s), with severity, exploitation and fixes.
CVE-2026-1434
Medium · 6.1
CWE-79 Feb 27, 2026
Reflected XSS in Omega-PSIR
Omega-PSIR is vulnerable to Reflected XSS via the lang parameter. An attacker can craft a malicious URL that, when opened, causes arbitrary JavaScript to execute in the victim’s browser.
This issue was fixed in 4.6.7.