CVE-2026-63147 | Omnispace Agora up to 26.9.x paramFilter FILES cross site scripting

October 13, 2026 Yanac

A vulnerability described as problematic has been identified in Omnispace Agora up to 26.9.x. This issue affects some unknown processing of the component paramFilter. Such manipulation of the argument FILES leads to cross site scripting.

This vulnerability is documented as CVE-2026-63147. The attack can be executed remotely. There is not any exploit available.

Upgrading the affected component is recommended.VulDB Recent EntriesRead More