Skip to contentOmnispace Agora Project vulnerabilities
- omnispace agora projectOmnispace Agora Project < 26.10.0 Stored XSS via Category DescriptionCVE-2026-631715.1 Medium
- omnispace agora projectOmnispace Agora Project < 26.10.0 Stored XSS via Messenger IframeCVE-2026-631695.3 Medium
- omnispace agora projectOmnispace Agora Project < 26.10.0 Stored XSS via Nested POST Array BypassCVE-2026-631685.1 Medium
- omnispace agora projectOmnispace Agora Project < 26.10.0 Stored XSS via Links ModuleCVE-2026-631575.1 Medium
- omnispace agora projectOmnispace Agora Project < 26.10.0 Reflected XSS via visioUrl ParameterCVE-2026-631565.1 Medium
- omnispace agora projectOmnispace Agora Project < 26.10.0 Stored XSS via Poll-Response Attachment FilenameCVE-2026-631485.1 Medium
- omnispace agora projectOmnispace Agora Project < 26.10.0 Stored XSS via Uploaded File NameCVE-2026-631475.1 Medium
- omnispace agora projectOmnispace Agora Project < 26.10.0 Broken Function-Level Authorization via User-EditCVE-2026-631727.1 High
- omnispace agora projectOmnispace Agora Project < 26.10.0 Session Fixation via AuthenticationCVE-2026-631618.6 High
- omnispace agora projectOmnispace Agora Project < 26.10.0 Broken Access Control via spaceAffectListCVE-2026-631748.6 High
- omnispace agora projectOmnispace Agora Project < 26.10.0 Broken Access Control via setAffectations()CVE-2026-631538.6 High
- omnispace agora projectOmnispace Agora Project < 26.10.0 SQL Injection via sortEvents ParameterCVE-2026-631658.6 High
- omnispace agora projectOmnispace Agora Project < 26.10.0 Second-Order SQL Injection via _idCategoryFilterCVE-2026-631528.6 High
- omnispace agora projectOmnispace Agora Project < 26.10.0 Broken Access Control via MobileFileDownloadCVE-2026-631638.7 High
- omnispace agora projectOmnispace Agora Project < 26.10.0 Path Traversal via tmpFolderName ParameterCVE-2026-631628.7 High
- omnispace agora projectOmnispace Agora Project < 26.10.0 SQL Identifier Injection via agoraFields[]CVE-2026-631548.7 High
- omnispace agora projectOmnispace Agora Project < 26.10.0 Insecure Remember-Me Token StorageCVE-2026-631609.1 Critical
- omnispace agora projectOmnispace Agora Project < 26.10.0 Predictable Password-Reset Token Account TakeoverCVE-2026-631599.1 Critical
- omnispace agora projectOmnispace Agora Project < 26.10.0 Pass-the-Hash Authentication Bypass via CookiesCVE-2026-631589.1 Critical
- omnispace agora projectOmnispace Agora Project < 26.10.0 Predictable Default Password via uniqid()CVE-2026-631499.1 Critical
- omnispace agora projectOmnispace Agora Project < 26.10.0 PHP Code Injection via config.inc.phpCVE-2026-631469.3 Critical