CVE-2026-28445 Details
Description
Typebot is a chatbot builder tool. In versions 3.15.2 and prior, the RatingButton component in the embed package renders the user-controlled customIcon.svg field directly via Solid's innerHTML directive without any sanitization, even though DOMPurify is already a dependency and is used elsewhere in the codebase (e.g., StreamingBubble.tsx). Because rating blocks are not flagged as isUnsafe by the import sanitizer and the builder preview renders bots inline on the builder's own origin (builder.typebot.io) under a CSP permitting 'unsafe-inline', a malicious imported or collaborator-crafted typebot can execute arbitrary HTML/JS in the builder's authenticated context, bypassing the Web Worker sandbox that protects Script blocks during preview. This allows session hijacking and privilege escalation within the builder application. This issue has been fixed in version 3.16.0.
A stored cross-site scripting vulnerability has been identified in Typebot, a chatbot builder tool, affecting versions through 3.15.2. The issue arises in the RatingButton component of the embed package, where the customIcon.svg field is rendered directly into the DOM using Solid's innerHTML directive, without proper sanitization. This vulnerability allows for the execution of arbitrary HTML and JavaScript in the builder's authenticated context, bypassing the Web Worker sandbox that typically protects Script blocks during preview. As a result, an attacker could hijack a user's session and escalate privileges within the builder application.
Users can update to Typebot version 3.16.0 or later, where this vulnerability has been fixed.
Metrics
CVSS 4.0 Severity and Vector Strings:
VolerionCVSS 3.x Severity and Vector Strings:
No data available for CVSS Version 2.0 on this CVE.
Volerion
Assessed May 22, 2026CISA-ADP
Assessed May 22, 2026References to Advisories, Solutions, and Tools
By selecting these links, you will be leaving this site. These are references gathered from the official CVE record and are not endorsed by Volerion.
| URL | Source(s) | Tag(s) |
|---|---|---|
| https://github.com/baptisteArno/typebot.io/security/advisories/GHSA-6m7c-xfhp-p9fh | CISA-ADP | AdvisoryRemedyVendor |
| https://github.com/baptisteArno/typebot.io/commit/474ecbf46bc47a75265bada2599f12b2179de375 | [email protected] | Source CodeVendor |
| https://github.com/baptisteArno/typebot.io/releases/tag/v3.16.0 | [email protected] | Release NotesVendor |
| https://github.com/baptisteArno/typebot.io/security/advisories/GHSA-6m7c-xfhp-p9fh | [email protected] | AdvisoryRemedyVendor |
Weakness Enumeration
| CWE-ID | CWE Name | Source |
|---|---|---|
| CWE-79 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') | [email protected] |
Affected Products
| Product | Versions |
|---|---|
| Typebot | <= 3.15.2 (semver) |
CPE
Remediation
| |
| Typebot.io | All versions |
CPE
Remediation
| |
| Typebot.io JS | All versions |
CPE
Remediation
| |
| Typebot.io React | All versions |
CPE
Remediation
| |
Change History
5 change records found show changes
| Date | Action | Recorded By |
|---|---|---|
| Jul 23, 2026 | CVE Translated | [email protected] |
| Jun 17, 2026 | CVE Modified | [email protected] |
| Jun 17, 2026 | CVE Modified | CISA-ADP |
| May 22, 2026 | CVE Modified | CISA-ADP |
| May 22, 2026 | New CVE Received | [email protected] |