Typebot - vulnerabilities (CVEs)

6 CVEs in 1 products, 0 in the last 30 days, newest from 2026-01-22.

Products

CVE-2025-65098 - CVSS 7.4 (high), 2026-01-22: Typebot is an open-source chatbot builder. In versions prior to 3.13.2, client-side script execution in Typebot allows stealing all stored credentials from…
CVE-2025-64709 - CVSS 9.9 (critical), 2025-11-13: Typebot is an open-source chatbot builder. In versions prior to 3.13.1, a Server-Side Request Forgery (SSRF) vulnerability in the Typebot webhook block (HTTP…
CVE-2025-64706 - CVSS 7.5 (high), 2025-11-13: Typebot is an open-source chatbot builder. In version 3.9.0 up to but excluding version 3.13.0, an Insecure Direct Object Reference (IDOR) vulnerability…
CVE-2024-38757 - CVSS 6.5 (medium), 2024-07-20: Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Typebot allows Stored XSS.This issue affects…
CVE-2024-30264 - CVSS 9.3 (critical), 2024-04-04: Typebot is an open-source chatbot builder. A reflected cross-site scripting (XSS) in the sign-in page of typebot.io prior to version 2.24.0 may allow an…
CVE-2021-24902 - CVSS 4.8 (medium), 2021-12-27: The Typebot | Build beautiful conversational forms WordPress plugin before 1.4.3 does not sanitise and escape the Publish ID setting, which could allow high…