agentprime: chatwootEvery new CVE for chatwoot.https://agentprime.io/CVE-2026-115725: Chatwoot before 4.17.0 Cross-Account Authorization Bypass via source_idhttps://agentprime.io/advisories/CVE-2026-115725/https://agentprime.io/advisories/CVE-2026-115725/CVSS 2.3 (Low). Published by the CVE Program. Not analysed by agentprime yet.Fri, 23 Oct 2026 11:36:48 GMTCVECVE-2026-113355: Chatwoot before 4.14.0 Stored XSS via Help Center Video Embed Linkshttps://agentprime.io/advisories/CVE-2026-113355/https://agentprime.io/advisories/CVE-2026-113355/CVSS 4.8 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Tue, 20 Oct 2026 10:41:40 GMTCVECVE-2026-92527: chatwoot Shopify OAuth callbacks_controller.rb server-side request forgeryhttps://agentprime.io/advisories/CVE-2026-92527/https://agentprime.io/advisories/CVE-2026-92527/CVSS 5.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Wed, 16 Sep 2026 20:15:09 GMTCVECVE-2026-72719: Chatwoot: Cross-Account Resource Transfer via `account_id` Parameterhttps://agentprime.io/advisories/CVE-2026-72719/https://agentprime.io/advisories/CVE-2026-72719/CVSS 6.7 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Mon, 10 Aug 2026 15:38:09 GMTCVECVE-2026-63765: Chatwoot < 4.16.0 Unauthenticated ActiveStorage Direct Upload Arbitrary Blob Creationhttps://agentprime.io/advisories/CVE-2026-63765/https://agentprime.io/advisories/CVE-2026-63765/CVSS 8.8 (High). Published by the CVE Program. Not analysed by agentprime yet.Thu, 23 Jul 2026 17:52:10 GMTCVECVE-2026-44707: Chatwoot: Pre-Account Takeover via OAuth on Unconfirmed Accountshttps://agentprime.io/advisories/CVE-2026-44707/https://agentprime.io/advisories/CVE-2026-44707/CVSS 6.8 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Tue, 26 May 2026 17:10:08 GMTCVECVE-2026-44706: Chatwoot: SQL Injection in Conversation/Contact Filter API via Custom Attribute Valueshttps://agentprime.io/advisories/CVE-2026-44706/https://agentprime.io/advisories/CVE-2026-44706/CVSS 8.5 (High). Published by the CVE Program. Not analysed by agentprime yet.Tue, 26 May 2026 17:07:41 GMTCVECVE-2026-5205: chatwoot Webhook API trigger.rb Trigger server-side request forgeryhttps://agentprime.io/advisories/CVE-2026-5205/https://agentprime.io/advisories/CVE-2026-5205/CVSS 5.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Tue, 31 Mar 2026 16:30:11 GMTCVECVE-2026-4990: chatwoot Signup Endpoint login improper authorizationhttps://agentprime.io/advisories/CVE-2026-4990/https://agentprime.io/advisories/CVE-2026-4990/CVSS 6.9 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Fri, 27 Mar 2026 21:27:18 GMTCVECVE-2025-12246: chatwoot Admin IframeLoader.vue cross site scriptinghttps://agentprime.io/advisories/CVE-2025-12246/https://agentprime.io/advisories/CVE-2025-12246/CVSS 5.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Mon, 27 Oct 2025 07:32:09 GMTCVECVE-2025-12245: chatwoot Widget IFrameHelper.js initPostMessageCommunication origin validationhttps://agentprime.io/advisories/CVE-2025-12245/https://agentprime.io/advisories/CVE-2025-12245/CVSS 6.9 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Mon, 27 Oct 2025 07:32:07 GMTCVECVE-2025-21628: Chatwoot has a Blind SQL-injection in Conversation and Contacts filtershttps://agentprime.io/advisories/CVE-2025-21628/https://agentprime.io/advisories/CVE-2025-21628/CVSS 9.1 (Critical). Critical: CVSS score 9.1: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.Thu, 09 Jan 2025 17:10:05 GMTCVEcritical