Threats tagged 'ghsa-r5g8-q953-3458'

Omnispace Agora Project versions before 26.10.0 have a second-order SQL injection vulnerability via the _idCategoryFilter parameter. Authenticated attackers can inject malicious SQL that is stored in the session and later executed when the filter is applied, potentially leading to unauthorized database access or manipulation.