← Back

Tawk.to

tawk.to

Vendor: Tawk • 2 CVEs

CVEs (2)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
CVE-2025-45960
1Tawk
1Tawk.to
Jun 17, 2026
Jul 25, 2025
N/A· v4
6.1 MEDIUM· v3
N/A· v2
Cross Site Scripting vulnerability in tawk.to Live Chat v.1.6.1 allows a remote attacker to execute arbitrary code via the web application stores and displays user-supplied input without proper input validation or encodi...Show more
Cross Site Scripting vulnerability in tawk.to Live Chat v.1.6.1 allows a remote attacker to execute arbitrary code via the web application stores and displays user-supplied input without proper input validation or encodingShow less
CVE-2024-57026
1Tawk
1Tawk.to
Jun 17, 2026
Feb 24, 2025
N/A· v4
6.1 MEDIUM· v3
N/A· v2
TawkTo Widget Version <= 1.3.7 is vulnerable to Cross Site Scripting (XSS) due to processing user input in a way that allows JavaScript execution.