EUVD-2025-31594

Malicious code in bioql PyPI...

CVE-2025-57483

A reflected cross-site scripting XSS vulnerability in tawk.to chatbox widget v4 allows attackers to execute arbitrary Javascript in the context of the user's browser via injecting a crafted payload into the vulnerable parameter...

PT-2025-39845

Name of the Vulnerable Software and Affected Versions tawk.to chatbox widget version 4 Description A reflected cross-site scripting XSS issue exists in tawk.to chatbox widget version 4. This allows attackers to execute arbitrary Javascript in the context of a user’s browser by injecting a crafted...

CVE-2025-57483

A reflected cross-site scripting XSS vulnerability in tawk.to chatbox widget v4 allows attackers to execute arbitrary Javascript in the context of the user's browser via injecting a crafted payload into the vulnerable parameter...

CVE-2025-57483: Improper Neutralization of Input During Web Page Generation

A reflected cross-site scripting XSS vulnerability in tawk.to chatbox widget v4 allows attackers to execute arbitrary Javascript in the context of the user's browser via injecting a crafted payload into the vulnerable parameter...

CVE-2025-57483

The tawk.to chatbox widget v4 is vulnerable to a reflected cross-site scripting (XSS) issue due to unvalidated input. Attackers can inject a crafted payload into a vulnerable parameter to execute arbitrary JavaScript within the context of a user's browser. While the vulnerability is confirmed and...