TI-2025-40251 CVE-2025-65098 · GHSA-4xc5-wfwc-jw47
Typebot Vulnerable to Credential Theft via Client-Side Script Execution and API Authorization Bypass
Priority HIGH 66
Typebot is an open-source chatbot builder.
Vulnerabilities
5 records
TI-2025-40055 CVE-2025-64709
Typebot May Expose AWS EKS Credentials via Server Side Request Forgery in Webhook Block
Priority HIGH 76
Typebot is an open-source chatbot builder.
TI-2025-40052 CVE-2025-64706
Typebot IDOR Vulnerability: Unauthorized API Token Deletion and Exposure
Priority HIGH 66
Typebot is an open-source chatbot builder.
TI-2024-20010 CVE-2024-30264
typebot.io: `GHSL-2024-040`
Priority HIGH 73
Typebot is an open-source chatbot builder.
TI-2021-07182 CVE-2021-24902 · GHSA-jv5v-53vg-gcm3
Typebot < 1.4.3 - Admin+ Stored Cross Site Scripting
Priority LOW 23
The Typebot | Build beautiful conversational forms WordPress plugin before 1.4.3 does not sanitise and escape the Publish ID setting, which could allow high privilege users to perform Cross-Site Scripting attacks even wh…