259 matches found
chatwoot cross-site scripting vulnerability
chatwoot is an application. Customer engagement suite, an open source alternative to intercom, Zendesk, Salesforce Service Cloud, etc. chatwoot suffers from a cross-site scripting vulnerability that stems from the program's lack of data validation filtering of user-supplied data and output. An...
CVE-2022-1022
Cross-site Scripting XSS - Stored in GitHub repository chatwoot/chatwoot prior to 2.5.0...
CVE-2022-1022
Cross-site Scripting XSS - Stored in GitHub repository chatwoot/chatwoot prior to 2.5.0...
Cross site scripting
Cross-site Scripting XSS - Stored in GitHub repository chatwoot/chatwoot prior to 2.5.0...
CVE-2022-1022
Cross-site Scripting XSS - Stored in GitHub repository chatwoot/chatwoot prior to 2.5.0...
CVE-2022-1022 Cross-site Scripting (XSS) - Stored in chatwoot/chatwoot
Cross-site Scripting XSS - Stored in GitHub repository chatwoot/chatwoot prior to 2.5.0...
CVE-2022-1022
Chatwoot (chatwoot/chatwoot) contains a stored XSS in versions prior to 2.5.0. The vulnerability stems from insufficient input validation/filtering and the use of v-html in the UI, which can cause injected JavaScript to execute in the client. Exploitation details in the Huntr report demonstrate p...
chatwoot 跨站脚本漏洞
chatwoot is an application. Customer engagement suite, an open source alternative to intercom, Zendesk, Salesforce Service Cloud, etc. chatwoot suffers from a cross-site scripting vulnerability that stems from the program's lack of data validation filtering of user-supplied data and output. An...
CVE-2022-1022: Improper Neutralization of Input During Web Page Generation
Cross-site Scripting XSS - Stored in GitHub repository chatwoot/chatwoot prior to 2.5.0...
PT-2022-13597
Name of the Vulnerable Software and Affected Versions chatwoot/chatwoot versions prior to 2.5.0 Description The issue is related to Cross-site Scripting XSS - Stored. This means that an attacker can inject malicious scripts into the application, which are then stored and executed by the...
Insecure Storage of Sensitive Information in chatwoot/chatwoot
BUG ======== Stored xss via referer url allow to hijack victim access-token STEP TO REPRODUCE =================== 1. From admin account goto https://app.chatwoot.com/app/accounts/42689/settings/inboxes/list and create a inbox of type website .\ Now get you configuration script from this inbox and...
CVE-2021-3813
Improper Privilege Management in GitHub repository chatwoot/chatwoot prior to v2.2...
CVE-2021-3813
Improper Privilege Management in GitHub repository chatwoot/chatwoot prior to v2.2...
CVE-2021-3813
Improper Privilege Management in GitHub repository chatwoot/chatwoot prior to v2.2...
Input validation
Improper Privilege Management in GitHub repository chatwoot/chatwoot prior to v2.2...
CVE-2021-3813
Improper Privilege Management in GitHub repository chatwoot/chatwoot prior to v2.2...
CVE-2021-3813 Improper Privilege Management in chatwoot/chatwoot
Improper Privilege Management in GitHub repository chatwoot/chatwoot prior to v2.2...
Cross-site Scripting (XSS) - Stored in chatwoot/chatwoot
Description In order to render raw HTML in Vue.js you may use v-html attribute, which opens a door for XSS in case of malicious input. Chatwoot actually uses it in several places, such as...