CVE Intelligence

AlgoNetLab OrcaStatLLM-Researcher vulnerabilities

🔔 Create alert RSS Version checker

Published CVEs affecting AlgoNetLab OrcaStatLLM-Researcher: 1 record(s), with affected versions and fixes.

CVE-2026-24903 Medium · 5.4 CWE-79 Feb 6, 2026
OrcaStatLLM Researcher Stored Cross-Site Scripting (XSS) via Log Message Injection in Session Page
OrcaStatLLM Researcher is an LLM Based Research Paper Generator. A Stored Cross-Site Scripting (XSS) vulnerability was discovered in the Log Message in the Session Page in OrcaStatLLM-Researcher that allows attackers to inject and execute arbitrary JavaScript code in victims' browsers through malicious research topic inputs.