CVE-2023-2109: Chatwoot

Medium severity, CVSS 6.1. EPSS: 0.4% chance of exploitation in the next 30 days.

Cross-site Scripting (XSS) - DOM in GitHub repository chatwoot/chatwoot prior to 2.14.0.

Affected products

• Chatwoot Chatwoot: before 2.14.0 (fixed in 2.14.0)

Published 2023-04-17. Last modified 2026-06-17.