pracharapol

1 exploit Active since Jul 2025
CVE-2025-45960 NOMISEC MEDIUM WORKING POC
tawk.to < 1.6.1 - Stored Cross-Site Scripting via User-Supplied Input
Cross Site Scripting vulnerability in tawk.to Live Chat v.1.6.1 allows a remote attacker to execute arbitrary code via the web application stores and displays user-supplied input without proper input validation or encoding
5 stars
CVSS 6.1