Threats tagged 'ghsa-4gw9-m5rw-6837'

1 threat

Severity	CVSS	Threat	Source	Published	Score and star
Medium	5.1	CVE-2026-63148Omnispace Agora Project before 26.10.0 contains a stored cross-site scripting vulnerability that allows authenticated Medium5.12026-10-13GCVE DatabaseCVE-2026-63148 Omnispace Agora Project versions before 26.10.0 contain a stored cross-site scripting (XSS) vulnerability. Authenticated attackers can exploit this by uploading a poll-response attachment with a malicious filename that bypasses sanitization, leading to script execution in users' browsers when viewing affected pages such as the dashboard. Report on CVE-2026-63148 Vulnerability CWE-79 #ghsa-4gw9-m5rw-6837	GCVE Database	2026-10-13

Page 1 of 1