Skip to content
OpenAdvisories

Package · npm

@developer.notchatbot/webchat

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Feed

  • Medium 5.4
    CVE-2026-30048 Public exploit

    NotChatbot WebChat has a stored cross-site scripting (XSS) vulnerability

    A stored cross-site scripting (XSS) vulnerability exists in the NotChatbot WebChat widget thru 1.4.4. User-supplied input is not properly sanitized before being stored and rendered in the chat conversation history. This allows an attacker to inject arbitrary …

    @developer.notchatbot/webchat npm