CVE-2017-6559

Name of the Vulnerable Software and Affected Versions Agora-Project version 3.2.2

Description The issue exists in the form of a cross-site scripting (XSS) attack. This attack can be executed through the index.php endpoint with specific parameters, including disconnect=1 and msgNotif[] containing malicious code.

Recommendations For Agora-Project version 3.2.2, update to a newer version that contains a fix for this issue. At the moment, there is no information about a newer version that contains a fix for this vulnerability.