Vulnerabilidades do Algonet Orcastatllm Researcher

🔔 Criar alerta RSS Verificador de versão

CVEs publicadas que afetam Algonet Orcastatllm Researcher: 1 registro(s), com versões afetadas e correções.
cpe:2.3:a:algonet:orcastatllm_researcher

CVE-2026-24903 Média · 5.4 CWE-79 06/02/2026

OrcaStatLLM Researcher Stored Cross-Site Scripting (XSS) via Log Message Injection in Session Page

OrcaStatLLM Researcher is an LLM Based Research Paper Generator. A Stored Cross-Site Scripting (XSS) vulnerability was discovered in the Log Message in the Session Page in OrcaStatLLM-Researcher that allows attackers to inject and execute arbitrary JavaScript code in victims' browsers through malicious research topic inputs.