Description
OrcaStatLLM Researcher is an LLM Based Research Paper Generator. A Stored Cross-Site Scripting (XSS) vulnerability was discovered in the Log Message in the Session Page in OrcaStatLLM-Researcher that allows attackers to inject and execute arbitrary JavaScript code in victims' browsers through malicious research topic inputs.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| AlgoNetLab | OrcaStatLLM-Researcher | <= 1 | — |