CVE Intelligence

Algonet Orcastatllm Researcher vulnerabilities

🔔 Create alert RSS Version checker

Published CVEs affecting Algonet Orcastatllm Researcher: 1 record(s), with affected versions and fixes.
cpe:2.3:a:algonet:orcastatllm_researcher

CVE-2026-24903 Medium · 5.4 CWE-79 Feb 6, 2026
OrcaStatLLM Researcher Stored Cross-Site Scripting (XSS) via Log Message Injection in Session Page
OrcaStatLLM Researcher is an LLM Based Research Paper Generator. A Stored Cross-Site Scripting (XSS) vulnerability was discovered in the Log Message in the Session Page in OrcaStatLLM-Researcher that allows attackers to inject and execute arbitrary JavaScript code in victims' browsers through malicious research topic inputs.