Omnispace vulnerabilities

Products

• Agora Project 21

Newest

• omnispace agora project Omnispace Agora Project < 26.10.0 Stored XSS via Category Description CVE-2026-63171 5.1 MediumOctober 13, 2026
• omnispace agora project Omnispace Agora Project < 26.10.0 Stored XSS via Messenger Iframe CVE-2026-63169 5.3 MediumOctober 13, 2026
• omnispace agora project Omnispace Agora Project < 26.10.0 Stored XSS via Nested POST Array Bypass CVE-2026-63168 5.1 MediumOctober 13, 2026
• omnispace agora project Omnispace Agora Project < 26.10.0 Stored XSS via Links Module CVE-2026-63157 5.1 MediumOctober 13, 2026
• omnispace agora project Omnispace Agora Project < 26.10.0 Reflected XSS via visioUrl Parameter CVE-2026-63156 5.1 MediumOctober 13, 2026
• omnispace agora project Omnispace Agora Project < 26.10.0 Stored XSS via Poll-Response Attachment Filename CVE-2026-63148 5.1 MediumOctober 13, 2026
• omnispace agora project Omnispace Agora Project < 26.10.0 Stored XSS via Uploaded File Name CVE-2026-63147 5.1 MediumOctober 13, 2026
• omnispace agora project Omnispace Agora Project < 26.10.0 Broken Function-Level Authorization via User-Edit CVE-2026-63172 7.1 HighOctober 13, 2026
• omnispace agora project Omnispace Agora Project < 26.10.0 Session Fixation via Authentication CVE-2026-63161 8.6 HighOctober 13, 2026
• omnispace agora project Omnispace Agora Project < 26.10.0 Broken Access Control via spaceAffectList CVE-2026-63174 8.6 HighOctober 13, 2026
• omnispace agora project Omnispace Agora Project < 26.10.0 Broken Access Control via setAffectations() CVE-2026-63153 8.6 HighOctober 13, 2026
• omnispace agora project Omnispace Agora Project < 26.10.0 SQL Injection via sortEvents Parameter CVE-2026-63165 8.6 HighOctober 13, 2026
• omnispace agora project Omnispace Agora Project < 26.10.0 Second-Order SQL Injection via _idCategoryFilter CVE-2026-63152 8.6 HighOctober 13, 2026
• omnispace agora project Omnispace Agora Project < 26.10.0 Broken Access Control via MobileFileDownload CVE-2026-63163 8.7 HighOctober 13, 2026
• omnispace agora project Omnispace Agora Project < 26.10.0 Path Traversal via tmpFolderName Parameter CVE-2026-63162 8.7 HighOctober 13, 2026
• omnispace agora project Omnispace Agora Project < 26.10.0 SQL Identifier Injection via agoraFields[] CVE-2026-63154 8.7 HighOctober 13, 2026
• omnispace agora project Omnispace Agora Project < 26.10.0 Insecure Remember-Me Token Storage CVE-2026-63160 9.1 CriticalOctober 13, 2026
• omnispace agora project Omnispace Agora Project < 26.10.0 Predictable Password-Reset Token Account Takeover CVE-2026-63159 9.1 CriticalOctober 13, 2026
• omnispace agora project Omnispace Agora Project < 26.10.0 Pass-the-Hash Authentication Bypass via Cookies CVE-2026-63158 9.1 CriticalOctober 13, 2026
• omnispace agora project Omnispace Agora Project < 26.10.0 Predictable Default Password via uniqid() CVE-2026-63149 9.1 CriticalOctober 13, 2026
• omnispace agora project Omnispace Agora Project < 26.10.0 PHP Code Injection via config.inc.php CVE-2026-63146 9.3 CriticalOctober 13, 2026