← Database

CVE-2026-96388

MEDIUM CVSS: 5.4 Published: 2026-10-22 Modified: 2026-10-22

Description

Cross-Site Request Forgery (CSRF) vulnerability in Drupal Tawk.to - Live chat application allows Cross Site Request Forgery. This issue affects Tawk.to - Live chat application versions: from 0.0.0 to 3.0.4.

Affected Platforms

Unknown

Weakness Type

CWE-352

References