Tawk

    Dashboard / Vendors

    Products: 3
    Vulnerabilities: 5
    Known Exploited: 0
    0
    Critical Level Threats
    2
    High Level Threats
    2
    Medium Level Threats
    0
    Low Level Threats

    Vulnerabilities

    100806040200
    JanFebMarAprMayJunJulAugSepOctNovDec
    Critical Level Threats
    High Level Threats
    Medium Level Threats
    Low Level Threats

    Products Security index

    Actions
    Items Per Page

    Vulnerabilities

    CVE-2025-8349

    Cross-Site Scripting (XSS) stored in Tawk Live Chat

    Last Modified: Apr 15, 2026
    Published: Oct 20, 2025

    CVE-2025-57483

    A reflected cross-site scripting (XSS) vulnerability in tawk.to chatbox widget v4 allows attackers to execute arbitrary Javascript in the context of the user's browser via injecting a crafted payload into the vulnerable parameter.

    Last Modified: Apr 15, 2026
    Published: Sep 29, 2025

    CVE-2025-45960

    Cross Site Scripting vulnerability in tawk.to Live Chat v.1.6.1 allows a remote attacker to execute arbitrary code via the web application stores and displays user-supplied input without proper input validation or encoding

    Last Modified: Oct 14, 2025
    Published: Jul 25, 2025

    CVE-2024-57026

    TawkTo Widget Version <= 1.3.7 is vulnerable to Cross Site Scripting (XSS) due to processing user input in a way that allows JavaScript execution.

    Last Modified: Mar 03, 2025
    Published: Feb 24, 2025

    CVE-2021-24914

    Tawk.to Live Chat < 0.6.0 - Subscriber+ Visitor Monitoring & Chat Removal

    Last Modified: Nov 21, 2024
    Published: Dec 06, 2021
    Items Per Page