Threats tagged 'ghsa-r6mm-4cpq-p3fg'

1 threat

Severity	CVSS	Threat	Source	Published	Score and star
Medium	5.1	CVE-2026-63171Omnispace Agora Project before 26.10.0 contains a stored cross-site scripting vulnerability that allows authenticated Medium5.12026-10-13GCVE DatabaseCVE-2026-63171 Omnispace Agora Project versions before 26.10.0 contain a stored cross-site scripting (XSS) vulnerability. Authenticated attackers can inject malicious scripts by submitting a specially crafted forum category description that includes a double-quote character. This input breaks out of an HTML input value attribute due to the HTMLPurifier configuration preserving double-quotes, enabling script execution in the browsers of users viewing the affected forum category. Report on CVE-2026-63171 Vulnerability CWE-79 #ghsa-r6mm-4cpq-p3fg	GCVE Database	2026-10-13

Page 1 of 1