← Database

CVE-2025-45960

MEDIUM CVSS: 6.1 Published: 2025-07-25 Modified: 2026-07-05

Description

Cross Site Scripting vulnerability in tawk.to Live Chat v.1.6.1 allows a remote attacker to execute arbitrary code via the web application stores and displays user-supplied input without proper input validation or encoding

Affected Platforms

Tawk Tawk.To

Weakness Type

CWE-79

References