@typebot.io/js vulnerabilities (npm)
3 vulnerabilities.
-
@typebot.io/jsnpm TypeBot: Stored XSS via javascript: URI in text bubble links — bot author executes JS on visitors' browsers 5.4 Medium -
@typebot.io/jsnpm Typebot: Stored XSS via Rating Block Custom Icon Bypasses isUnsafe Sandbox in Builder Preview 8.7 High -
@typebot.io/jsnpm Typebot Vulnerable to Credential Theft via Client-Side Script Execution and API Authorization Bypass 7.4 High