Skip to content
OpenAdvisories

Product · chatwoot

chatwoot/chatwoot

14 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

5 results · Clear filters · Feed

  • Medium 5.6
    CVE-2024-0640

    Stored XSS in chatwoot/chatwoot

    A stored cross-site scripting (XSS) vulnerability exists in chatwoot/chatwoot versions 3.0.0 to 3.5.1. This vulnerability allows an admin user to inject malicious JavaScript code via the dashboard app settings, which can then be executed by another admin user…

    chatwoot chatwoot/chatwoot
  • Medium 6.8
    CVE-2021-3740

    Session Fixation in chatwoot/chatwoot

    A Session Fixation vulnerability exists in chatwoot/chatwoot versions prior to 2.4.0. The application does not invalidate existing sessions on other devices when a user changes their password, allowing old sessions to persist. This can lead to unauthorized ac…

    chatwoot chatwoot/chatwoot
  • Medium 5.3
    CVE-2023-2109

    Cross-site Scripting (XSS) - DOM in chatwoot/chatwoot

    Cross-site Scripting (XSS) - DOM in GitHub repository chatwoot/chatwoot prior to 2.14.0.

    chatwoot chatwoot/chatwoot
  • Medium 6.5
    CVE-2021-3813

    Improper Privilege Management in chatwoot/chatwoot

    Improper Privilege Management in GitHub repository chatwoot/chatwoot prior to v2.2.

    chatwoot chatwoot/chatwoot
  • Medium 6.1
    CVE-2022-0527

    Cross-site Scripting (XSS) - Stored in chatwoot/chatwoot

    Cross-site Scripting (XSS) - Stored in GitHub repository chatwoot/chatwoot prior to 2.2.0.

    chatwoot chatwoot/chatwoot