Skip to content
OpenAdvisories

Product · Tawk

Live Chat

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Medium 5.3
    CVE-2025-8349

    Cross-Site Scripting (XSS) stored in Tawk Live Chat

    Cross-site Scripting (XSS) stored vulnerability in Tawk Live Chat. This vulnerability allows an attacker to execute JavaScript code in the victim's browser by uploading a malicious PDF with JavaScript payload through the chatbot. The PDF is stored by the appl…

    Tawk Live Chat