CVE-2025-55133

Impact

In Agora Foundation Agora fall23-Alpha1 before b087490, there is XSS via topicName in client/agora/public/js/editorManager.js.

Affected packages

This record carries no package version data, so it cannot be matched against a dependency list automatically. Read the advisory and compare your version by hand.

Weakness classification

References

• NVD record
• CVE.org record
• https://github.com/Msfv3n0m/vulnerability-research/tree/main/CVE-2025-55133
• https://github.com/agorafoundation/agora/commit/b087490042cb131963b524d0f86511a63a7ff085
• https://github.com/agorafoundation/agora/pull/556