259 matches found
chatwoot cross-site scripting vulnerability
chatwoot is an application. Customer engagement suite, an open source alternative to intercom, Zendesk, Salesforce Service Cloud, etc. chatwoot suffers from a cross-site scripting vulnerability that stems from the program's lack of data validation filtering of user-supplied data and output. An...
CVE-2022-1022
Cross-site Scripting XSS - Stored in GitHub repository chatwoot/chatwoot prior to 2.5.0...
CVE-2022-1022
Cross-site Scripting XSS - Stored in GitHub repository chatwoot/chatwoot prior to 2.5.0...
Cross site scripting
Cross-site Scripting XSS - Stored in GitHub repository chatwoot/chatwoot prior to 2.5.0...
CVE-2022-1022
Cross-site Scripting XSS - Stored in GitHub repository chatwoot/chatwoot prior to 2.5.0...
CVE-2022-1022 Cross-site Scripting (XSS) - Stored in chatwoot/chatwoot
Cross-site Scripting XSS - Stored in GitHub repository chatwoot/chatwoot prior to 2.5.0...
CVE-2022-1022
Chatwoot (chatwoot/chatwoot) contains a stored XSS in versions prior to 2.5.0. The vulnerability stems from insufficient input validation/filtering and the use of v-html in the UI, which can cause injected JavaScript to execute in the client. Exploitation details in the Huntr report demonstrate p...
PT-2022-13597
Name of the Vulnerable Software and Affected Versions chatwoot/chatwoot versions prior to 2.5.0 Description The issue is related to Cross-site Scripting XSS - Stored. This means that an attacker can inject malicious scripts into the application, which are then stored and executed by the...
CVE-2022-1022: Improper Neutralization of Input During Web Page Generation
Cross-site Scripting XSS - Stored in GitHub repository chatwoot/chatwoot prior to 2.5.0...
chatwoot 跨站脚本漏洞
chatwoot is an application. Customer engagement suite, an open source alternative to intercom, Zendesk, Salesforce Service Cloud, etc. chatwoot suffers from a cross-site scripting vulnerability that stems from the program's lack of data validation filtering of user-supplied data and output. An...
Insecure Storage of Sensitive Information in chatwoot/chatwoot
BUG ======== Stored xss via referer url allow to hijack victim access-token STEP TO REPRODUCE =================== 1. From admin account goto https://app.chatwoot.com/app/accounts/42689/settings/inboxes/list and create a inbox of type website .\ Now get you configuration script from this inbox and...
CVE-2021-3813
Improper Privilege Management in GitHub repository chatwoot/chatwoot prior to v2.2...
CVE-2021-3813
Improper Privilege Management in GitHub repository chatwoot/chatwoot prior to v2.2...
Input validation
Improper Privilege Management in GitHub repository chatwoot/chatwoot prior to v2.2...
CVE-2021-3813
Improper Privilege Management in GitHub repository chatwoot/chatwoot prior to v2.2...
CVE-2021-3813
Improper Privilege Management in GitHub repository chatwoot/chatwoot prior to v2.2...
CVE-2021-3813 Improper Privilege Management in chatwoot/chatwoot
Improper Privilege Management in GitHub repository chatwoot/chatwoot prior to v2.2...
Cross-site Scripting (XSS) - Stored in chatwoot/chatwoot
Description In order to render raw HTML in Vue.js you may use v-html attribute, which opens a door for XSS in case of malicious input. Chatwoot actually uses it in several places, such as...