CVE-2026-4263 — Incorrect authorization in HiJiffy Chatbot
Vulnerability of incorrect authorization in HiJiffy Chatbot allows an attacker to download private messages from other users via the parameter 'visitor' in '/api/v1/webchat/mes…
Published: 2026-03-26 · CVSS: 6.9 · CVSS 4.0
Vulnerability of incorrect authorization in HiJiffy Chatbot allows an attacker to download private messages from other users via the parameter 'visitor' in '/api/v1/webchat/message'.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7