Agora Foundation

Records3All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical0CVSS 9.0–10.0

CVSS high0CVSS 7.0–8.9

Exploited now

Agora Foundation records in CISA KEV

No Agora Foundation vulnerabilities are listed in CISA KEV.

3 records

TI-2025-34819 CVE-2025-55135 · GHSA-jcj4-g9w3-h34q

LOW 28

In Agora Foundation Agora fall23-Alpha1 before 690ce56, there is XSS via a profile picture to server/controller/userController.js.

CVSS 3.1MEDIUM 6.4 Network Low privileges No interaction EPSS 0.00273 Published 2025-08-07 Fixed CWE-434

TI-2025-34818 CVE-2025-55134 · GHSA-5w72-mr9j-pc4m

LOW 28

In Agora Foundation Agora fall23-Alpha1 before b087490, there is XSS via tag in client/agora/public/js/editorManager.js.

CVSS 3.1MEDIUM 6.4 Network Low privileges No interaction EPSS 0.00265 Published 2025-08-07 Fixed CWE-79

TI-2025-34817 CVE-2025-55133 · GHSA-g5fq-77pp-34rr

LOW 28

In Agora Foundation Agora fall23-Alpha1 before b087490, there is XSS via topicName in client/agora/public/js/editorManager.js.

CVSS 3.1MEDIUM 6.4 Network Low privileges No interaction EPSS 0.00265 Published 2025-08-07 Fixed CWE-79