Description
TawkTo Widget Version <= 1.3.7 is vulnerable to Cross Site Scripting (XSS) due to processing user input in a way that allows JavaScript execution.
Medium · 6.1
CVE-2024-57026
EUVD-2025-4290GHSA-g4r7-7j67-74ch
TawkTo Widget Version <= 1.3.7 is vulnerable to Cross Site Scripting (XSS) due to processing user input in a way that allows JavaScript exe…
Published Feb 24, 2025 · Updated Mar 3, 2025 · Assigned by mitre