← All advisories

Medium severity6.1NVD Advisory· Published Apr 17, 2023· Updated Jun 17, 2026

CVE-2023-2109

CVE-2023-2109

Description

Cross-site Scripting (XSS) - DOM in GitHub repository chatwoot/chatwoot prior to 2.14.0.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

3

Chatwoot/Chatwoot2 versions
cpe:2.3:a:chatwoot:chatwoot:*:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:a:chatwoot:chatwoot:*:*:*:*:*:*:*:*range: <2.14.0
- (no CPE)range: unspecified
GitHub/chatwoot/chatwootllm-create
Range: <2.14.0

Patches

Vulnerability mechanics

References

2

github.com/chatwoot/chatwoot/commit/a06a5a574ad908b0ef2db7b47d05c3774eeb493dnvdPatch
huntr.dev/bounties/fd5999fd-b1fd-44b4-ae2e-8f95b5c3d1b6nvdPermissions RequiredThird Party Advisory

News mentions

0

No linked articles in our index yet.