Threats tagged 'ghsa-rfhc-h8r6-5jmp'

1 threat

Severity	CVSS	Threat	Source	Published	Score and star
Medium	5.1	CVE-2026-63168Omnispace Agora Project before 26.10.0 contains a stored cross-site scripting vulnerability that allows authenticated Medium5.12026-10-13GCVE DatabaseCVE-2026-63168 Omnispace Agora Project versions before 26.10.0 have a stored cross-site scripting (XSS) vulnerability. Authenticated attackers can submit malicious script code via two-dimensional POST arrays in the LDAP/person import flow, bypassing the paramsFilter() due to its failure to recurse nested arrays. This allows script injection into user profiles, which execute in other users' browsers when rendered. Report on CVE-2026-63168 Vulnerability CWE-79 #ghsa-rfhc-h8r6-5jmp	GCVE Database	2026-10-13

Page 1 of 1