Medium severity5.4NVD Advisory· Published Feb 6, 2026· Updated Jun 17, 2026
CVE-2026-24903
CVE-2026-24903
Description
OrcaStatLLM Researcher is an LLM Based Research Paper Generator. A Stored Cross-Site Scripting (XSS) vulnerability was discovered in the Log Message in the Session Page in OrcaStatLLM-Researcher that allows attackers to inject and execute arbitrary JavaScript code in victims' browsers through malicious research topic inputs.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
3- cpe:2.3:a:algonet:orcastatllm_researcher:1:*:*:*:*:*:*:*
- AlgoNetLab/OrcaStatLLM-Researcherv5Range: <= 1
Patches
Vulnerability mechanics
References
1- github.com/AlgoNetLab/OrcaStatLLM-Researcher/security/advisories/GHSA-47wv-g894-82m4nvdExploitVendor Advisory
News mentions
0No linked articles in our index yet.