cliengo — Vulnerabilities & Security Advisories 4

Cliengo provides lead generation and chat solutions for websites, helping businesses capture and convert visitor interactions. Historically, the platform has been affected by multiple cross-site scripting (XSS) vulnerabilities and remote code execution flaws, often stemming from improper input validation and insecure direct object references. While no major public security incidents have been documented, the four recorded CVEs highlight persistent risks in web application security, particularly around user-generated content handling and third-party integrations. These vulnerabilities could allow attackers to execute arbitrary code, steal session cookies, or manipulate chat functionality if exploited.