CVE-2025-67078

n/a / n/a PUBLISHED

Description (CNA)

Cross site scripting (XSS) vulnerability in Omnispace Agora Project before 25.10 allowing attackers to execute arbitrary code via the notify parameter of the file controller used to display errors.

Affected (CNA)

Vendor / product	Versions
n/a / n/a	affected n/a

CWE

No CWE identifiers supplied.

References

https://www.agora-project.net
https://www.helx.io/blog/advisory-agora-project/

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.