Lucene search
K

9 matches found

EUVD
EUVD
added 2025/10/03 8:7 p.m.4 views

EUVD-2025-4290

Malicious code in bioql PyPI...

6.1CVSS6.6AI score0.00137EPSS
Exploits1References2
CNNVD
CNNVD
added 2025/09/29 12:0 a.m.1 views

TawkTo Widget 安全漏洞

TawkTo Widget is a widget design program from TawkTo, Inc. A security vulnerability exists in version v4 of TawkTo Widget that originates from unvalidated input and could lead to a reflected cross-site scripting attack...

8.1CVSS6AI score0.00029EPSS
Exploits0References2
RedhatCVE
RedhatCVE
added 2025/02/26 12:26 a.m.8 views

CVE-2024-57026

TawkTo Widget Version = 1.3.7 is vulnerable to Cross Site Scripting XSS due to processing user input in a way that allows JavaScript execution...

6.1CVSS5.8AI score0.00137EPSS
Exploits1References1
OSV
OSV
added 2025/02/24 6:15 p.m.0 views

CVE-2024-57026

TawkTo Widget Version = 1.3.7 is vulnerable to Cross Site Scripting XSS due to processing user input in a way that allows JavaScript execution...

6.1CVSS5.8AI score
Exploits0References1
CVE
CVE
added 2025/02/24 12:0 a.m.61 views

CVE-2024-57026

The CVE-2024-57026 entry concerns the TawkTo Widget, affected versions prior to or equal to 1.3.7, which are vulnerable to Cross Site Scripting (XSS) due to how user input is processed. This is the stated root cause and impact across connected sources (e.g., Red Hat, CVE listings, and PT Security...

6.1CVSS6.1AI score0.00137EPSS
Exploits1References1Affected Software1
Vulnrichment
Vulnrichment
added 2025/02/24 12:0 a.m.7 views

CVE-2024-57026

TawkTo Widget Version = 1.3.7 is vulnerable to Cross Site Scripting XSS due to processing user input in a way that allows JavaScript execution...

6.1AI score0.00137EPSS
Exploits1References1
CNNVD
CNNVD
added 2025/02/24 12:0 a.m.4 views

TawkTo Widget 安全漏洞

TawkTo Widget is a widget design program from TawkTo, Inc. A security vulnerability exists in TawkTo Widget version 1.3.7 and earlier, which stems from mishandling of user input, resulting in a cross-site scripting XSS vulnerability that allows JavaScript execution...

6.1CVSS5.8AI score0.00137EPSS
Exploits1References2
Positive Technologies
Positive Technologies
added 2025/02/24 12:0 a.m.2 views

PT-2025-7777 · Tawkto · Tawkto Widget

Name of the Vulnerable Software and Affected Versions: TawkTo Widget versions prior to 1.3.8 Description: The issue arises from the processing of user input in a way that allows JavaScript execution, leading to Cross Site Scripting XSS. Recommendations: For versions prior to 1.3.8, update to...

6.1CVSS6.7AI score0.00137EPSS
Exploits1References4
Cvelist
Cvelist
added 2025/02/24 12:0 a.m.9 views

CVE-2024-57026

TawkTo Widget Version = 1.3.7 is vulnerable to Cross Site Scripting XSS due to processing user input in a way that allows JavaScript execution...

0.00137EPSS
Exploits1References1
Rows per page
Query Builder