Login Request a demo
CH
Vendor
chatwoot
2 products with CVEs on record
29
CVEs
0
On KEV
2
New 30D
Products
CH
chatwoot
chatwoot
9.8
24 CVEs0 on KEV2 new
CH
chatwoot/chatwoot
chatwoot
9.8
5 CVEs0 on KEV0 new
Recent CVEs
CVEProductCVSSEPSSPublishedSummary
CVE-2026-115725
New
CH
chatwoot
chatwoot
4.2
0%
Oct 23Chatwoot before 4.17.0 Cross-Account Authorization Bypass via source_id
CVE-2026-113355
CH
chatwoot
chatwoot
4.8
0%
Oct 20Chatwoot before 4.14.0 Stored XSS via Help Center Video Embed Links
CVE-2026-92527
CH
chatwoot
Chatwoot
6.3
0%
Sep 16chatwoot Shopify OAuth callbacks_controller.rb server-side request forgery
CVE-2026-72719
CH
chatwoot
chatwoot
6.7
1%
Aug 10Chatwoot: Cross-Account Resource Transfer via `account_id` Parameter
CVE-2026-63765
CH
chatwoot
chatwoot
8.2
1%
Jul 23Chatwoot < 4.16.0 Unauthenticated ActiveStorage Direct Upload Arbitrary Blob Creation
CVE-2026-44707
CH
chatwoot
chatwoot
6.8
0%
May 26Chatwoot: Pre-Account Takeover via OAuth on Unconfirmed Accounts
CVE-2026-44706
CH
chatwoot
chatwoot
8.5
0%
May 26Chatwoot: SQL Injection in Conversation/Contact Filter API via Custom Attribute Values
CVE-2025-12246
CH
Chatwoot
Chatwoot
6.1
0%
Oct 27chatwoot Admin IframeLoader.vue cross site scripting
CVE-2025-12245
CH
Chatwoot
Chatwoot
5.3
0%
Oct 27chatwoot Widget IFrameHelper.js initPostMessageCommunication origin validation
CVE-2024-0640
CH
chatwoot/chatwoot
chatwoot
4.8
0%
Mar 20Stored XSS in chatwoot/chatwoot
CVE-2025-21628
CH
chatwoot
chatwoot
8.8
1%
Jan 9Chatwoot has a Blind SQL-injection in Conversation and Contacts filters
CVE-2021-3740
CH
chatwoot/chatwoot
chatwoot
6.8
0%
Nov 15Session Fixation in chatwoot/chatwoot
CVE-2021-3742
CH
chatwoot/chatwoot
chatwoot
8.8
0%
Nov 15Server-Side Request Forgery (SSRF) in chatwoot/chatwoot
CVE-2021-3741
CH
chatwoot/chatwoot
chatwoot
5.4
0%
Nov 15Stored Cross-site Scripting (XSS) in chatwoot/chatwoot
CVE-2023-2109
CH
Chatwoot
Chatwoot
6.1
0%
Apr 17Cross-site Scripting (XSS) - DOM in GitHub repository chatwoot/chatwoot prior to 2.14.0
CVE-2022-3741
CH
chatwoot/chatwoot
chatwoot
9.8
1%
Oct 28Improper Restriction of Excessive Authentication Attempts in chatwoot/chatwoot
CVE-2022-2901
CH
Chatwoot
Chatwoot
7.1
1%
Sep 6Improper Authorization in GitHub repository chatwoot/chatwoot prior to 2.8
CVE-2022-0542
CH
Chatwoot
Chatwoot
6.1
1%
Aug 19Cross-site Scripting (XSS) - DOM in GitHub repository chatwoot/chatwoot prior to 2.7.0
CVE-2022-1021
CH
Chatwoot
Chatwoot
5.4
1%
Aug 19Insecure Storage of Sensitive Information in GitHub repository chatwoot/chatwoot prior to 2.6.0
CVE-2022-1022
CH
Chatwoot
Chatwoot
5.4
4%
Apr 21Cross-site Scripting (XSS) - Stored in GitHub repository chatwoot/chatwoot prior to 2.5.0
CVE-2021-3813
CH
Chatwoot
Chatwoot
6.5
1%
Feb 9Improper Privilege Management in GitHub repository chatwoot/chatwoot prior to v2.2
CVE-2022-0527
CH
Chatwoot
Chatwoot
6.1
1%
Feb 9Cross-site Scripting (XSS) - Stored in GitHub repository chatwoot/chatwoot prior to 2.2.0
CVE-2022-0526
CH
Chatwoot
Chatwoot
6.1
1%
Feb 9Cross-site Scripting (XSS) - Stored in GitHub repository chatwoot/chatwoot prior to 2.2.0
CVE-2021-3649
CH
Chatwoot
Chatwoot
7.5
1%
Jul 16chatwoot is vulnerable to Inefficient Regular Expression Complexity