CVE-2026-63168

The Omnispace Agora Project before version 26.10.0 is susceptible to a stored cross-site scripting (XSS) vulnerability. The root cause is a failure in the paramsFilter() request parameter filter, which does not recurse into nested arrays, allowing authenticated attackers to bypass security checks...