Skip to content
OpenAdvisories

Vendor

chattermate

1 known vulnerabilities.

Products

chattermate.chat 1
All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Critical 9.3
    CVE-2026-24399

    ChatterMate has Stored Cross-Site Scripting (XSS) via Chatbot Input Execution

    ChatterMate is a no-code AI chatbot agent framework. In versions 1.0.8 and below, the chatbot accepts and executes malicious HTML/JavaScript payloads when supplied as chat input. Specifically, an <iframe> payload containing a javascript: URI can be processed …

    chattermate chattermate.chat