medium6.1
CVE-2024-57026
TawkTo Widget Version <= 1.3.7 is vulnerable to Cross Site Scripting (XSS) due to processing user input in a way that allows JavaScript execution.
Impact
TawkTo Widget Version <= 1.3.7 is vulnerable to Cross Site Scripting (XSS) due to processing user input in a way that allows JavaScript execution.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Tawk | Tawk.To | through 1.3.7 |