Vulnerabilities (CVE)

Filtered by vendor Livehelperchat Subscribe
Total 34 CVE
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2022-0226 1 Livehelperchat 1 Live Helper Chat 2023-12-10 4.3 MEDIUM 4.3 MEDIUM
livehelperchat is vulnerable to Cross-Site Request Forgery (CSRF)
CVE-2022-0395 1 Livehelperchat 1 Live Helper Chat 2023-12-10 3.5 LOW 5.4 MEDIUM
Cross-site Scripting (XSS) - Stored in Packagist remdex/livehelperchat prior to 3.93v.
CVE-2022-0245 1 Livehelperchat 1 Livehelperchat 2023-12-10 4.3 MEDIUM 4.3 MEDIUM
Cross-Site Request Forgery (CSRF) in GitHub repository livehelperchat/livehelperchat prior to 2.0.
CVE-2021-4131 1 Livehelperchat 1 Live Helper Chat 2023-12-10 6.8 MEDIUM 8.8 HIGH
livehelperchat is vulnerable to Cross-Site Request Forgery (CSRF)
CVE-2022-0374 1 Livehelperchat 1 Live Helper Chat 2023-12-10 3.5 LOW 5.4 MEDIUM
Cross-site Scripting (XSS) - Stored in Packagist remdex/livehelperchat prior to 3.93v.
CVE-2021-4050 1 Livehelperchat 1 Live Helper Chat 2023-12-10 4.3 MEDIUM 6.1 MEDIUM
livehelperchat is vulnerable to Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2022-0253 1 Livehelperchat 1 Livehelperchat 2023-12-10 3.5 LOW 5.4 MEDIUM
livehelperchat is vulnerable to Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2021-4176 1 Livehelperchat 1 Live Helper Chat 2023-12-10 4.3 MEDIUM 6.1 MEDIUM
livehelperchat is vulnerable to Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2021-4179 1 Livehelperchat 1 Live Helper Chat 2023-12-10 3.5 LOW 5.4 MEDIUM
livehelperchat is vulnerable to Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2021-4169 1 Livehelperchat 1 Live Helper Chat 2023-12-10 4.3 MEDIUM 6.1 MEDIUM
livehelperchat is vulnerable to Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2021-4132 1 Livehelperchat 1 Live Helper Chat 2023-12-10 3.5 LOW 5.4 MEDIUM
livehelperchat is vulnerable to Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2020-26134 1 Livehelperchat 1 Live Helper Chat 2023-12-10 4.3 MEDIUM 6.1 MEDIUM
Live Helper Chat before 3.44v allows stored XSS in chat messages with an operator via BBCode.
CVE-2020-26135 1 Livehelperchat 1 Live Helper Chat 2023-12-10 4.3 MEDIUM 6.1 MEDIUM
Live Helper Chat before 3.44v allows reflected XSS via the setsettingajax PATH_INFO.
CVE-2017-1000059 1 Livehelperchat 1 Live Helper Chat 2023-12-10 4.3 MEDIUM 6.1 MEDIUM
Live Helper Chat version 2.06v and older is vulnerable to Cross-Site Scripting in the HTTP Header handling resulting in the execution of any user provided Javascript code in the session of other users.