Unrated severityNVD Advisory· Published Feb 6, 2026· Updated Feb 6, 2026
OrcaStatLLM Researcher Stored Cross-Site Scripting (XSS) via Log Message Injection in Session Page
CVE-2026-24903
Description
OrcaStatLLM Researcher is an LLM Based Research Paper Generator. A Stored Cross-Site Scripting (XSS) vulnerability was discovered in the Log Message in the Session Page in OrcaStatLLM-Researcher that allows attackers to inject and execute arbitrary JavaScript code in victims' browsers through malicious research topic inputs.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
2- AlgoNetLab/OrcaStatLLM-Researcherv5Range: <= 1
Patches
Vulnerability mechanics
References
1- github.com/AlgoNetLab/OrcaStatLLM-Researcher/security/advisories/GHSA-47wv-g894-82m4mitrex_refsource_CONFIRM
News mentions
0No linked articles in our index yet.