https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-06T05:38:19.869980+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cve-2021-3741 CVE-2021-3741 — Stored Cross-site Scripting (XSS) in chatwoot/chatwoot 2026-10-06T05:38:19.871099+00:00

Affected: chatwoot/chatwoot

A stored cross-site scripting (XSS) vulnerability was discovered in chatwoot/chatwoot, affecting all versions prior to 2.6. The vulnerability occurs when a user uploads an SVG file containing a malicious XSS payload in the profile settings. When the avatar is opened in a new page, the custom JavaScript code is executed, leading to potential security risks.