Algonet vulnerabilities

🔔 Create alert RSS

Published CVEs affecting Algonet products: 1 record(s), with severity, exploitation and fixes.

Orcastatllm Researcher 1

Exploited only (KEV) →

CVE-2026-24903 Medium · 5.4 CWE-79 Feb 6, 2026

OrcaStatLLM Researcher Stored Cross-Site Scripting (XSS) via Log Message Injection in Session Page

OrcaStatLLM Researcher is an LLM Based Research Paper Generator. A Stored Cross-Site Scripting (XSS) vulnerability was discovered in the Log Message in the Session Page in OrcaStatLLM-Researcher that allows attackers to inject and execute arbitrary JavaScript code in victims' browsers through malicious research topic inputs.