Omnispace

14 CVEs across 1 Omnispace products. Browse Omnispace vulnerabilities, severities, and proof-of-concept exploits.

Omnispace products with known CVEs

ProductCVEs
Agora Project14
Omnispace CVEs — newest first
CVESeverityScorePublishedSummary
CVE-2026-63171Medium5.42026-10-13Omnispace Agora Project before 26.10.0 contains a stored cross-site scripting vulnerability that allows authenticated attackers to inject malicious script by s…
CVE-2026-63169Medium6.42026-10-13Omnispace Agora Project before 26.10.0 contains a stored cross-site scripting vulnerability that allows authenticated users to post messages containing attacke…
CVE-2026-63168Medium5.42026-10-13Omnispace Agora Project before 26.10.0 contains a stored cross-site scripting vulnerability that allows authenticated attackers to persist unneutralized markup…
CVE-2026-63157Medium5.42026-10-13Omnispace Agora Project before 26.10.0 contains a stored cross-site scripting vulnerability that allows authenticated users to inject malicious scripts by subm…
CVE-2026-63156Medium6.12026-10-13Omnispace Agora Project before 26.10.0 contains a reflected cross-site scripting vulnerability that allows unauthenticated attackers to inject malicious HTML a…
CVE-2026-63174High8.12026-10-13Omnispace Agora Project before 26.10.0 contains a broken access control vulnerability that allows a space administrator to assign users into spaces outside the…
CVE-2026-63172High7.12026-10-13Omnispace Agora Project before 26.10.0 contains a broken access control vulnerability that allows a regular, non-administrative member to create user accounts…
CVE-2026-63165High8.12026-10-13Omnispace Agora Project before 26.10.0 contains a SQL injection vulnerability in the calendar functionality that allows attackers to inject malicious SQL by ma…
CVE-2026-63163High7.52026-10-13Omnispace Agora Project before 26.10.0 contains a broken access control vulnerability in the MobileFileDownload route that allows unauthenticated attackers to…
CVE-2026-63162High8.82026-10-13Omnispace Agora Project before 26.10.0 contains a path traversal vulnerability that allows attackers to write arbitrary files outside the intended temporary di…
CVE-2026-63161High8.82026-10-13Omnispace Agora Project before 26.10.0 contains a session fixation vulnerability that allows remote attackers to hijack authenticated sessions by planting a kn…
CVE-2026-63160High7.42026-10-13Omnispace Agora Project before 26.10.0 contains a vulnerability where the persistent remember-me token is stored verbatim server-side, making the stored value…
CVE-2026-63159High7.42026-10-13Omnispace Agora Project before 26.10.0 contains a predictable password-reset token vulnerability that allows unauthenticated attackers to take over user accoun…
CVE-2026-63152High8.12026-10-13Omnispace Agora Project before 26.10.0 contains a second-order SQL injection vulnerability that allows authenticated attackers to inject malicious SQL via the…