CVE-2026-3951 | LockerProject Locker 0.0.0/0.0.1/0.1.0 Error Response registry.js authIsAwesome ID cross site scripting (Issue 963)

A vulnerability was found in LockerProject Locker 0.0.0/0.0.1/0.1.0 and classified as problematic. Affected is the function authIsAwesome of the file source-code/Locker-master/Ops/registry.js of the component Error Response Handler. The manipulation of the argument ID results in cross site scripting.

This vulnerability is reported as CVE-2026-3951. The attack can be launched remotely. Moreover, an exploit is present.

The project was informed of the problem early through an issue report but has not responded yet.