HiJiffy vulnerabilities

🔔 Create alert RSS

Published CVEs affecting HiJiffy products: 2 record(s), with severity, exploitation and fixes.

HiJiffy Chatbot 2

Exploited only (KEV) →

CVE-2026-4263 Medium · 6.9 CWE-863 Mar 26, 2026

Incorrect authorization in HiJiffy Chatbot

Vulnerability of incorrect authorization in HiJiffy Chatbot allows an attacker to download private messages from other users via the parameter 'visitor' in '/api/v1/webchat/message'.

CVE-2026-4262 Medium · 6.9 CWE-863 Mar 26, 2026

Incorrect authorization in HiJiffy Chatbot

Vulnerability of incorrect authorization in HiJiffy Chatbot allows an attacker to download private messages from other users via the parameter 'ID' in '/api/v1/download/<ID>/'.