Threats tagged 'ghsa-ghgw-7245-fm88'

1 threat

Severity	CVSS	Threat	Source	Published	Score and star
Medium	5.1	CVE-2026-63157Omnispace Agora Project before 26.10.0 contains a stored cross-site scripting vulnerability that allows authenticated Medium5.12026-10-13GCVE DatabaseCVE-2026-63157 Omnispace Agora Project versions before 26.10.0 have a stored cross-site scripting (XSS) vulnerability. Authenticated users can inject malicious scripts via an unsanitized 'adress' field in the Links module. This payload executes in the browsers of users viewing the links list, potentially enabling session hijacking or further client-side attacks. Report on CVE-2026-63157 Vulnerability CWE-79 #ghsa-ghgw-7245-fm88	GCVE Database	2026-10-13

Page 1 of 1