← Back

Live Helper Chat

live_helper_chat

Vendor: Livehelperchat • 38 CVEs

CVEs (38)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
1Livehelperchat
1Live Helper Chat
Jun 17, 2026
Jan 26, 2022
N/A· v4
5.4 MEDIUM· v3
3.5 LOW· v2
Cross-site Scripting (XSS) - Stored in Packagist remdex/livehelperchat prior to 3.93v.
1Livehelperchat
1Live Helper Chat
Jun 17, 2026
Jan 19, 2022
N/A· v4
6.6 MEDIUM· v3
6.0 MEDIUM· v2
Authorization Bypass Through User-Controlled Key in Packagist remdex/livehelperchat prior to 3.92v.
1Livehelperchat
1Live Helper Chat
Jun 17, 2026
Jan 14, 2022
N/A· v4
4.3 MEDIUM· v3
4.3 MEDIUM· v2
livehelperchat is vulnerable to Cross-Site Request Forgery (CSRF)
1Livehelperchat
1Live Helper Chat
Jun 17, 2026
Jan 14, 2022
N/A· v4
6.5 MEDIUM· v3
4.3 MEDIUM· v2
livehelperchat is vulnerable to Cross-Site Request Forgery (CSRF)
1Livehelperchat
1Live Helper Chat
Jun 17, 2026
Jan 4, 2022
N/A· v4
5.3 MEDIUM· v3
5.0 MEDIUM· v2
livehelperchat is vulnerable to Generation of Error Message Containing Sensitive Information
1Livehelperchat
1Live Helper Chat
Jun 17, 2026
Dec 29, 2021
N/A· v4
6.1 MEDIUM· v3
4.3 MEDIUM· v2
livehelperchat is vulnerable to Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
1Livehelperchat
1Live Helper Chat
Jun 17, 2026
Dec 29, 2021
N/A· v4
5.4 MEDIUM· v3
3.5 LOW· v2
livehelperchat is vulnerable to Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
1Livehelperchat
1Live Helper Chat
Jun 17, 2026
Dec 28, 2021
N/A· v4
5.4 MEDIUM· v3
3.5 LOW· v2
livehelperchat is vulnerable to Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
1Livehelperchat
1Live Helper Chat
Jun 17, 2026
Dec 28, 2021
N/A· v4
5.3 MEDIUM· v3
5.0 MEDIUM· v2
livehelperchat is vulnerable to Generation of Error Message Containing Sensitive Information
1Livehelperchat
1Live Helper Chat
Jun 17, 2026
Dec 26, 2021
N/A· v4
6.1 MEDIUM· v3
4.3 MEDIUM· v2
livehelperchat is vulnerable to Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
1Livehelperchat
1Live Helper Chat
Jun 17, 2026
Dec 18, 2021
N/A· v4
8.8 HIGH· v3
6.8 MEDIUM· v2
livehelperchat is vulnerable to Cross-Site Request Forgery (CSRF)
1Livehelperchat
1Live Helper Chat
Jun 17, 2026
Dec 17, 2021
N/A· v4
5.4 MEDIUM· v3
3.5 LOW· v2
livehelperchat is vulnerable to Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
1Livehelperchat
1Live Helper Chat
Jun 17, 2026
Dec 16, 2021
N/A· v4
6.5 MEDIUM· v3
4.3 MEDIUM· v2
livehelperchat is vulnerable to Cross-Site Request Forgery (CSRF)
1Livehelperchat
1Live Helper Chat
Jun 17, 2026
Dec 8, 2021
N/A· v4
6.1 MEDIUM· v3
4.3 MEDIUM· v2
livehelperchat is vulnerable to Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
1Livehelperchat
1Live Helper Chat
Jun 17, 2026
Dec 7, 2021
N/A· v4
6.5 MEDIUM· v3
4.3 MEDIUM· v2
livehelperchat is vulnerable to Cross-Site Request Forgery (CSRF)
1Livehelperchat
1Live Helper Chat
Jun 17, 2026
Oct 2, 2020
N/A· v4
6.1 MEDIUM· v3
4.3 MEDIUM· v2
Live Helper Chat before 3.44v allows reflected XSS via the setsettingajax PATH_INFO.
1Livehelperchat
1Live Helper Chat
Jun 17, 2026
Oct 2, 2020
N/A· v4
6.1 MEDIUM· v3
4.3 MEDIUM· v2
Live Helper Chat before 3.44v allows stored XSS in chat messages with an operator via BBCode.
1Livehelperchat
1Live Helper Chat
May 13, 2026
Jul 17, 2017
N/A· v4
6.1 MEDIUM· v3
4.3 MEDIUM· v2
Live Helper Chat version 2.06v and older is vulnerable to Cross-Site Scripting in the HTTP Header handling resulting in the execution of any user provided Javascript code in the session of other users.