agentprime: omnispace-agora-projectEvery new CVE for omnispace-agora-project.https://agentprime.io/CVE-2026-63171: Omnispace Agora Project < 26.10.0 Stored XSS via Category Descriptionhttps://agentprime.io/advisories/CVE-2026-63171/https://agentprime.io/advisories/CVE-2026-63171/CVSS 5.1 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Tue, 13 Oct 2026 20:04:07 GMTCVECVE-2026-63169: Omnispace Agora Project < 26.10.0 Stored XSS via Messenger Iframehttps://agentprime.io/advisories/CVE-2026-63169/https://agentprime.io/advisories/CVE-2026-63169/CVSS 5.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Tue, 13 Oct 2026 20:03:22 GMTCVECVE-2026-63168: Omnispace Agora Project < 26.10.0 Stored XSS via Nested POST Array Bypasshttps://agentprime.io/advisories/CVE-2026-63168/https://agentprime.io/advisories/CVE-2026-63168/CVSS 5.1 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Tue, 13 Oct 2026 20:02:32 GMTCVECVE-2026-63157: Omnispace Agora Project < 26.10.0 Stored XSS via Links Modulehttps://agentprime.io/advisories/CVE-2026-63157/https://agentprime.io/advisories/CVE-2026-63157/CVSS 5.1 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Tue, 13 Oct 2026 20:01:53 GMTCVECVE-2026-63156: Omnispace Agora Project < 26.10.0 Reflected XSS via visioUrl Parameterhttps://agentprime.io/advisories/CVE-2026-63156/https://agentprime.io/advisories/CVE-2026-63156/CVSS 5.1 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Tue, 13 Oct 2026 20:01:07 GMTCVECVE-2026-63148: Omnispace Agora Project < 26.10.0 Stored XSS via Poll-Response Attachment Filenamehttps://agentprime.io/advisories/CVE-2026-63148/https://agentprime.io/advisories/CVE-2026-63148/CVSS 5.1 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Tue, 13 Oct 2026 20:00:23 GMTCVECVE-2026-63147: Omnispace Agora Project < 26.10.0 Stored XSS via Uploaded File Namehttps://agentprime.io/advisories/CVE-2026-63147/https://agentprime.io/advisories/CVE-2026-63147/CVSS 5.1 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Tue, 13 Oct 2026 19:59:44 GMTCVECVE-2026-63172: Omnispace Agora Project < 26.10.0 Broken Function-Level Authorization via User-Edithttps://agentprime.io/advisories/CVE-2026-63172/https://agentprime.io/advisories/CVE-2026-63172/CVSS 7.1 (High). Published by the CVE Program. Not analysed by agentprime yet.Tue, 13 Oct 2026 19:58:40 GMTCVECVE-2026-63161: Omnispace Agora Project < 26.10.0 Session Fixation via Authenticationhttps://agentprime.io/advisories/CVE-2026-63161/https://agentprime.io/advisories/CVE-2026-63161/CVSS 8.6 (High). Published by the CVE Program. Not analysed by agentprime yet.Tue, 13 Oct 2026 19:57:38 GMTCVECVE-2026-63174: Omnispace Agora Project < 26.10.0 Broken Access Control via spaceAffectListhttps://agentprime.io/advisories/CVE-2026-63174/https://agentprime.io/advisories/CVE-2026-63174/CVSS 8.6 (High). Published by the CVE Program. Not analysed by agentprime yet.Tue, 13 Oct 2026 19:56:31 GMTCVECVE-2026-63153: Omnispace Agora Project < 26.10.0 Broken Access Control via setAffectations()https://agentprime.io/advisories/CVE-2026-63153/https://agentprime.io/advisories/CVE-2026-63153/CVSS 8.6 (High). Published by the CVE Program. Not analysed by agentprime yet.Tue, 13 Oct 2026 19:55:45 GMTCVECVE-2026-63165: Omnispace Agora Project < 26.10.0 SQL Injection via sortEvents Parameterhttps://agentprime.io/advisories/CVE-2026-63165/https://agentprime.io/advisories/CVE-2026-63165/CVSS 8.6 (High). Published by the CVE Program. Not analysed by agentprime yet.Tue, 13 Oct 2026 19:54:59 GMTCVECVE-2026-63152: Omnispace Agora Project < 26.10.0 Second-Order SQL Injection via _idCategoryFilterhttps://agentprime.io/advisories/CVE-2026-63152/https://agentprime.io/advisories/CVE-2026-63152/CVSS 8.6 (High). Published by the CVE Program. Not analysed by agentprime yet.Tue, 13 Oct 2026 19:54:17 GMTCVECVE-2026-63163: Omnispace Agora Project < 26.10.0 Broken Access Control via MobileFileDownloadhttps://agentprime.io/advisories/CVE-2026-63163/https://agentprime.io/advisories/CVE-2026-63163/CVSS 8.7 (High). Published by the CVE Program. Not analysed by agentprime yet.Tue, 13 Oct 2026 19:53:16 GMTCVECVE-2026-63162: Omnispace Agora Project < 26.10.0 Path Traversal via tmpFolderName Parameterhttps://agentprime.io/advisories/CVE-2026-63162/https://agentprime.io/advisories/CVE-2026-63162/CVSS 8.7 (High). Published by the CVE Program. Not analysed by agentprime yet.Tue, 13 Oct 2026 19:52:25 GMTCVECVE-2026-63154: Omnispace Agora Project < 26.10.0 SQL Identifier Injection via agoraFields[]https://agentprime.io/advisories/CVE-2026-63154/https://agentprime.io/advisories/CVE-2026-63154/CVSS 8.7 (High). Published by the CVE Program. Not analysed by agentprime yet.Tue, 13 Oct 2026 19:49:45 GMTCVECVE-2026-63160: Omnispace Agora Project < 26.10.0 Insecure Remember-Me Token Storagehttps://agentprime.io/advisories/CVE-2026-63160/https://agentprime.io/advisories/CVE-2026-63160/CVSS 9.1 (Critical). Critical: CVSS score 9.1: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.Tue, 13 Oct 2026 19:46:59 GMTCVEcriticalCVE-2026-63159: Omnispace Agora Project < 26.10.0 Predictable Password-Reset Token Account Takeoverhttps://agentprime.io/advisories/CVE-2026-63159/https://agentprime.io/advisories/CVE-2026-63159/CVSS 9.1 (Critical). Critical: CVSS score 9.1: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.Tue, 13 Oct 2026 19:46:07 GMTCVEcriticalCVE-2026-63158: Omnispace Agora Project < 26.10.0 Pass-the-Hash Authentication Bypass via Cookieshttps://agentprime.io/advisories/CVE-2026-63158/https://agentprime.io/advisories/CVE-2026-63158/CVSS 9.1 (Critical). Critical: CVSS score 9.1: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.Tue, 13 Oct 2026 19:45:03 GMTCVEcriticalCVE-2026-63149: Omnispace Agora Project < 26.10.0 Predictable Default Password via uniqid()https://agentprime.io/advisories/CVE-2026-63149/https://agentprime.io/advisories/CVE-2026-63149/CVSS 9.1 (Critical). Critical: CVSS score 9.1: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.Tue, 13 Oct 2026 19:40:43 GMTCVEcriticalCVE-2026-63146: Omnispace Agora Project < 26.10.0 PHP Code Injection via config.inc.phphttps://agentprime.io/advisories/CVE-2026-63146/https://agentprime.io/advisories/CVE-2026-63146/CVSS 9.3 (Critical). Critical: CVSS score 9.3: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.Tue, 13 Oct 2026 19:36:31 GMTCVEcritical