Omnispace Agora Project

• CVE-2026-63171 Medium 5.4 Omnispace Agora Project < 26.10.0 Stored XSS via Category Description 0.2%
• CVE-2026-63169 Medium 6.4 Omnispace Agora Project < 26.10.0 Stored XSS via Messenger Iframe 0.3%
• CVE-2026-63168 Medium 5.4 Omnispace Agora Project < 26.10.0 Stored XSS via Nested POST Array Bypass 0.3%
• CVE-2026-63157 Medium 5.4 Omnispace Agora Project < 26.10.0 Stored XSS via Links Module 0.2%
• CVE-2026-63156 Medium 6.1 Omnispace Agora Project < 26.10.0 Reflected XSS via visioUrl Parameter 0.3%
• CVE-2026-63148 Medium 5.4 Omnispace Agora Project < 26.10.0 Stored XSS via Poll-Response Attachment Filename 0.2%
• CVE-2026-63147 Medium 5.4 Omnispace Agora Project < 26.10.0 Stored XSS via Uploaded File Name 0.2%
• CVE-2026-63172 High 7.1 Omnispace Agora Project < 26.10.0 Broken Function-Level Authorization via User-Edit 0.2%
• CVE-2026-63161 High 8.8 Omnispace Agora Project < 26.10.0 Session Fixation via Authentication 0.4%
• CVE-2026-63174 High 8.1 Omnispace Agora Project < 26.10.0 Broken Access Control via spaceAffectList 0.2%
• CVE-2026-63153 High 8.1 Omnispace Agora Project < 26.10.0 Broken Access Control via setAffectations() 0.3%
• CVE-2026-63165 High 8.1 Omnispace Agora Project < 26.10.0 SQL Injection via sortEvents Parameter 0.3%
• CVE-2026-63152 High 8.1 Omnispace Agora Project < 26.10.0 Second-Order SQL Injection via _idCategoryFilter 0.3%
• CVE-2026-63163 High 7.5 Omnispace Agora Project < 26.10.0 Broken Access Control via MobileFileDownload 0.4%
• CVE-2026-63162 High 8.8 Omnispace Agora Project < 26.10.0 Path Traversal via tmpFolderName Parameter 0.7%
• CVE-2026-63154 High 8.8 Omnispace Agora Project < 26.10.0 SQL Identifier Injection via agoraFields[] 0.4%
• CVE-2026-63160 High 7.4 Omnispace Agora Project < 26.10.0 Insecure Remember-Me Token Storage 0.3%
• CVE-2026-63159 High 7.4 Omnispace Agora Project < 26.10.0 Predictable Password-Reset Token Account Takeover 0.3%
• CVE-2026-63158 High 7.4 Omnispace Agora Project < 26.10.0 Pass-the-Hash Authentication Bypass via Cookies 0.4%
• CVE-2026-63149 High 7.4 Omnispace Agora Project < 26.10.0 Predictable Default Password via uniqid() 0.4%
• CVE-2026-63146 Critical 9.8 Omnispace Agora Project < 26.10.0 PHP Code Injection via config.inc.php 0.7%