CVE-2026-4263

CVE-2026-4263 concerns an incorrect authorization flaw in the HiJiffy Chatbot. The vulnerability allows an attacker to download private messages from other users by abusing the parameter 'visitor' in the API endpoint /api/v1/webchat/message. The CVSS details indicate a network-based, low-complexi...