cve/CVE-2024-57026.md at 93476d6c370e261fdc1b2b03a08066de45e4892d - cve - 临风笛

admin/cve

mirror of https://github.com/0xMarcio/cve.git synced 2025-11-30 18:56:19 +00:00

0xMarcio 1fb02038e8 Update CVE sources 2025-09-29 16:08

2025-09-29 16:08:36 +00:00

622 B

Raw Blame History

CVE-2024-57026

Description

TawkTo Widget Version <= 1.3.7 is vulnerable to Cross Site Scripting (XSS) due to processing user input in a way that allows JavaScript execution.

POC

Reference

https://cosmosofcyberspace.github.io/tawk_to_cve.html

Github

No PoCs found on GitHub currently.