Search vulnerabilities

Results 3

Export CSV
CVE-2025-55133

In Agora Foundation Agora fall23-Alpha1 before b087490, there is XSS via topicName in client/agora/public/js/editorManager.js.

CVSS 3.1 · 6.4 Medium EPSS < 1% KEV · Not listed
Products
CVE-2025-55134

In Agora Foundation Agora fall23-Alpha1 before b087490, there is XSS via tag in client/agora/public/js/editorManager.js.

CVSS 3.1 · 6.4 Medium EPSS < 1% KEV · Not listed
Products
CVE-2025-55135

In Agora Foundation Agora fall23-Alpha1 before 690ce56, there is XSS via a profile picture to server/controller/userController.js. Formats other than PNG, JPEG, and WEBP are permitted by server/routes/userRoutes.js; this includes SVG.

CVSS 3.1 · 6.4 Medium EPSS < 1% KEV · Not listed
Products