13 matches found
CVE-2026-30048
CVE-2026-30048 - NotChatbot WebChat 영상 데모 https://youtu.be/HklaoNKP9H8 재현 단계 1. 공식 패키지/CDN을 사용하여 WebChat 위젯을 통합합니다. 2. 채팅 인터페이스를 엽니다. 3. 위의 페이로드를 채팅 메시지로 보냅니다. 4. 대화를 다시 로드하거나 다시 엽니다. 5. 브라우저에서 JavaScript 실행을 확인합니다. 영향 피해자 브라우저에서의 임의 JavaScript 실행 세션 하이재킹 정보 노출 상황에 따른 잠재적 계정 탈취 근본 원인 사용자 입력이 채팅 기...
CVE-2026-30048
A stored cross-site scripting XSS vulnerability exists in the NotChatbot WebChat widget thru 1.4.4. User-supplied input is not properly sanitized before being stored and rendered in the chat conversation history. This allows an attacker to inject arbitrary JavaScript code which is executed when t...
EUVD-2026-12866
A stored cross-site scripting XSS vulnerability exists in the NotChatbot WebChat widget thru 1.4.4. User-supplied input is not properly sanitized before being stored and rendered in the chat conversation history. This allows an attacker to inject arbitrary JavaScript code which is executed when t...
GHSA-W3VX-52J6-9FJP NotChatbot WebChat has a stored cross-site scripting (XSS) vulnerability
A stored cross-site scripting XSS vulnerability exists in the NotChatbot WebChat widget thru 1.4.4. User-supplied input is not properly sanitized before being stored and rendered in the chat conversation history. This allows an attacker to inject arbitrary JavaScript code which is executed when t...
NotChatbot WebChat has a stored cross-site scripting (XSS) vulnerability
A stored cross-site scripting XSS vulnerability exists in the NotChatbot WebChat widget thru 1.4.4. User-supplied input is not properly sanitized before being stored and rendered in the chat conversation history. This allows an attacker to inject arbitrary JavaScript code which is executed when t...
CVE-2026-30048
A stored cross-site scripting XSS vulnerability exists in the NotChatbot WebChat widget thru 1.4.4. User-supplied input is not properly sanitized before being stored and rendered in the chat conversation history. This allows an attacker to inject arbitrary JavaScript code which is executed when t...
CVE-2026-30048
A stored cross-site scripting XSS vulnerability exists in the NotChatbot WebChat widget thru 1.4.4. User-supplied input is not properly sanitized before being stored and rendered in the chat conversation history. This allows an attacker to inject arbitrary JavaScript code which is executed when t...
CVE-2026-30048
A stored cross-site scripting (XSS) vulnerability exists in the NotChatbot WebChat widget, specifically within the @developer.notchatbot/webchat package. Affected versions include all versions up to and including 1.5.0 (specifically noted as thru 1.4.4 in some records). The root cause is the impr...
CVE-2026-30048: Improper Neutralization of Input During Web Page Generation
A stored cross-site scripting XSS vulnerability exists in the NotChatbot WebChat widget thru 1.4.4. User-supplied input is not properly sanitized before being stored and rendered in the chat conversation history. This allows an attacker to inject arbitrary JavaScript code which is executed when t...
CVE-2026-30048
A stored cross-site scripting XSS vulnerability exists in the NotChatbot WebChat widget thru 1.4.4. User-supplied input is not properly sanitized before being stored and rendered in the chat conversation history. This allows an attacker to inject arbitrary JavaScript code which is executed when t...
WebChat 安全漏洞
WebChat is an online real-time chat service developed by NotChatbot’s individual developer, designed for website integration. Versions of WebChat 1.4.4 and earlier contained security vulnerabilities. These vulnerabilities stemmed from improper cleaning of user input before it was stored and...
CVE-2026-30048
A stored cross-site scripting XSS vulnerability exists in the NotChatbot WebChat widget thru 1.4.4. User-supplied input is not properly sanitized before being stored and rendered in the chat conversation history. This allows an attacker to inject arbitrary JavaScript code which is executed when t...
PT-2026-26106
A stored cross-site scripting XSS vulnerability exists in the NotChatbot WebChat widget thru 1.4.4. User-supplied input is not properly sanitized before being stored and rendered in the chat conversation history. This allows an attacker to inject arbitrary JavaScript code which is executed when t...