Threats tagged 'ghsa-mwm7-gw2j-5q99'

1 threat

Severity	CVSS	Threat	Source	Published	Score and star
Medium	5.1	CVE-2026-63156Omnispace Agora Project before 26.10.0 contains a reflected cross-site scripting vulnerability that allows Medium5.12026-10-13GCVE DatabaseCVE-2026-63156 Omnispace Agora Project versions prior to 26.10.0 contain a reflected cross-site scripting (XSS) vulnerability. This flaw allows unauthenticated attackers to inject malicious HTML attributes via the visioUrl parameter, which bypasses URL sanitization and is urldecoded after filtering. Exploitation can lead to arbitrary JavaScript execution in the victim's browser before authentication. The vulnerability is fixed in version 26.10.0 by changes to app/Common/Req.php. Report on CVE-2026-63156 Vulnerability CWE-79 #ghsa-mwm7-gw2j-5q99	GCVE Database	2026-10-13

Page 1 of 1