Skip to content

CVE PROGRAM SOURCE RECORD5.3 Medium

CVE-2023-2109

Cross-site Scripting (XSS) - DOM in chatwoot/chatwoot

Read JSON ↗CVE.org ↗

Status: Published
Published: 2023-04-17
Updated: 2025-02-05
Assigning organization: @huntrdev

Description

Cross-site Scripting (XSS) - DOM in GitHub repository chatwoot/chatwoot prior to 2.14.0.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

chatwoot chatwoot/chatwoot

unspecified to < 2.14.0affected

References