Lucene search
K

8 matches found

Veracode
Veracode
added 2026/02/20 9:21 a.m.2 views

Cross Site Scripting (XSS)

Agora is vulnerable to Cross-Site Scripting XSS. The vulnerability is due to improper input handling of the topicName parameter in client/agora/public/js/editorManager.js, which allows an attacker to inject malicious scripts that execute in a user’s browser...

6.4CVSS6AI score0.00171EPSS
Exploits0References3Affected Software1
Veracode
Veracode
added 2026/02/20 8:56 a.m.4 views

Cross Site Scripting (XSS)

Agora is vulnerable to Cross-Site Scripting XSS. The vulnerability is due to improper input sanitization in the tag handling within client/agora/public/js/editorManager.js, which allows an attacker to inject malicious scripts that execute in a user’s browser...

6.4CVSS6AI score0.00171EPSS
Exploits0References2Affected Software1
RedhatCVE
RedhatCVE
added 2025/08/09 12:23 a.m.2 views

CVE-2025-55133

In Agora Foundation Agora fall23-Alpha1 before b087490, there is XSS via topicName in client/agora/public/js/editorManager.js...

6.4CVSS5.7AI score0.00171EPSS
Exploits0References1
RedhatCVE
RedhatCVE
added 2025/08/09 12:23 a.m.6 views

CVE-2025-55134

In Agora Foundation Agora fall23-Alpha1 before b087490, there is XSS via tag in client/agora/public/js/editorManager.js...

6.4CVSS5.7AI score0.00171EPSS
Exploits0References1
CNNVD
CNNVD
added 2025/08/07 12:0 a.m.2 views

agora 跨站脚本漏洞

agora is a cloud-based learning and research platform open-sourced by the Agora Foundation. A cross-site scripting vulnerability exists in versions prior to agora fall23-Alpha1 b087490, which stems from the topicName parameter in editorManager.js being susceptible to cross-site scripting attacks...

6.4CVSS6AI score0.00171EPSS
Exploits0References2
CNNVD
CNNVD
added 2025/08/07 12:0 a.m.1 views

agora 跨站脚本漏洞

agora is a cloud-based learning and research platform open-sourced by the Agora Foundation. A cross-site scripting vulnerability exists in versions prior to agora fall23-Alpha1 b087490, which stems from the tag parameter in editorManager.js being susceptible to cross-site scripting attacks...

6.4CVSS6AI score0.00171EPSS
Exploits0References2
OSV
OSV
added 2024/01/31 7:15 p.m.1 views

CVE-2024-22159

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in realmag777 WOLF – WordPress Posts Bulk Editor and Manager Professional allows Reflected XSS.This issue affects WOLF – WordPress Posts Bulk Editor and Manager Professional: from n/a through 1.0.8...

6.1CVSS7.3AI score0.00083EPSS
Exploits0References1
Positive Technologies
Positive Technologies
added 2023/08/18 12:0 a.m.3 views

PT-2023-23239 · WordPress · Realmag777 Wolf – Wordpress Posts Bulk Editor/Manager Professional

Name of the Vulnerable Software and Affected Versions: realmag777 WOLF – WordPress Posts Bulk Editor and Manager Professional plugin versions 1.0.6 and earlier Description: The issue is related to a Cross-Site Request Forgery CSRF that leads to a Stored Cross-Site Scripting XSS vulnerability. Thi...

7.1CVSS6.2AI score0.0008EPSS
Exploits0References3
Rows per page
Query Builder