https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Mon, 05 Oct 2026 05:02:12 +0000 https://cve.radiocsirt.org/vuln/euvd-2026-223886 EUVD-2026-223886 https://cve.radiocsirt.org/vuln/euvd-2026-223886 https://cve.radiocsirt.org/vuln/fkie_cve-2024-0640 <p>A stored cross-site scripting (XSS) vulnerability exists in chatwoot/chatwoot versions 3.0.0 to 3.5.1. This vulnerability allows an admin user to inject malicious JavaScript code via the dashboard app settings, which can then be executed by another admin user when they access the affected dashboard app. The issue is fixed in version 3.5.2.</p> <p>A stored cross-site scripting (XSS) vulnerability exists in chatwoot/chatwoot versions 3.0.0 to 3.5.1. This vulnerability allows an admin user to inject malicious JavaScript code via the dashboard app settings, which can then be executed by another admin user when they access the affected dashboard app. The issue is fixed in version 3.5.2.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2024-0640 https://cve.radiocsirt.org/vuln/ghsa-8gfh-hxjj-c33j <p>A stored cross-site scripting (XSS) vulnerability exists in chatwoot/chatwoot versions 3.0.0 to 3.5.1. This vulnerability allows an admin user to inject malicious JavaScript code via the dashboard app settings, which can then be executed by another admin user when they access the affected dashboard app. The issue is fixed in version 3.5.2.</p> <p>A stored cross-site scripting (XSS) vulnerability exists in chatwoot/chatwoot versions 3.0.0 to 3.5.1. This vulnerability allows an admin user to inject malicious JavaScript code via the dashboard app settings, which can then be executed by another admin user when they access the affected dashboard app. The issue is fixed in version 3.5.2.</p> https://cve.radiocsirt.org/vuln/ghsa-8gfh-hxjj-c33j https://cve.radiocsirt.org/vuln/gsd-2024-0640 gsd-2024-0640 https://cve.radiocsirt.org/vuln/gsd-2024-0640