CVE-2026-113355 | Chatwoot up to 4.13.x Video Embed Rendering render_embed_from_match cross site scripting

October 20, 2026 Yanac

A vulnerability was found in Chatwoot up to 4.13.x. It has been declared as problematic. Affected by this issue is the function render_embed_from_match of the component Video Embed Rendering. Executing a manipulation can lead to cross site scripting.

The identification of this vulnerability is CVE-2026-113355. The attack may be launched remotely. There is no exploit available.

It is recommended to upgrade the affected component.VulDB Recent EntriesRead More