HiJiffy HiJiffy Chatbot vulnerabilities
🔔 Create alert RSS Version checker
Published CVEs affecting HiJiffy HiJiffy Chatbot: 2 record(s), with affected versions and fixes.
CVE-2026-4263
Medium · 6.9
CWE-863 Mar 26, 2026
Incorrect authorization in HiJiffy Chatbot
Vulnerability of incorrect authorization in HiJiffy Chatbot allows an attacker to download private messages from other users via the parameter
'visitor' in '/api/v1/webchat/message'.
CVE-2026-4262
Medium · 6.9
CWE-863 Mar 26, 2026
Incorrect authorization in HiJiffy Chatbot
Vulnerability of incorrect authorization in HiJiffy Chatbot allows an attacker to download private messages from other users via the parameter 'ID' in '/api/v1/download/<ID>/'.