PT-2026-67867

Name of the Vulnerable Software and Affected Versions O2OA version 10 Description A reflected cross-site scripting XSS issue exists in the Forum posting function. This allows attackers to execute arbitrary Javascript in the victim's browser by using a crafted URL. Recommendations At the moment,...

CVE-2026-52370

A reflected cross-site scripting XSS vulnerability in the Forum posting function of O2OA v10 allows attackers to execute arbitrary Javascript in the context of the victim's browser via a crafted URL...