Skip to content
Noroxi

livehelperchat records

42 published records for vendor livehelperchat.

Filter by product ↓

Researcher profile

Entered KEV
0 · 0%
Weaponized
0 · 0%
Pre-auth RCE
2
With a fix record
45.2%
Median publish → KEV
No record has entered KEV

Pre-auth RCE: flaws that let an attacker run code over the network without an account. Median publish → KEV: the typical time between a record being published and CISA listing it as exploited.

Records by year

  1. 17
  2. 20
  3. 21
  4. 22
  5. 24
  6. 25
  7. 26

Bar: total · dark part: CISA KEV.

Recurring classes

The weakness classes this vendor ships most often: where to look.

CWE

Attack profile

All records

42 records
  • CVE-2024-27516
    39Monitor

    Server-Side Template Injection (SSTI) vulnerability in livehelperchat before 4.34v, allows remote attackers to execute arbitrary code and ob

    CriticalCVSS 9.8No exploitEPSS 1%

    livehelperchat · live helper chatFeb 28, 2024

  • CVE-2022-0935
    35Monitor

    Host Header injection in password Reset in livehelperchat/livehelperchat

    HighCVSS 8.8No exploitEPSS 1%

    livehelperchat · live helper chatApr 7, 2022

  • CVE-2021-4131
    35Monitor

    Cross-Site Request Forgery (CSRF) in livehelperchat/livehelperchat

    HighCVSS 8.8No exploitEPSS 0%

    livehelperchat · live helper chatDec 18, 2021

  • CVE-2022-1191
    32Monitor

    SSRF on index.php/cobrowse/proxycss/ in livehelperchat/livehelperchat

    HighCVSS 8.1No exploitEPSS 0%

    livehelperchat · live helper chatMar 31, 2022

  • CVE-2022-1213
    32Monitor

    SSRF filter bypass port 80, 433 in livehelperchat/livehelperchat

    HighCVSS 8.1No exploitEPSS 0%

    livehelperchat · live helper chatApr 5, 2022

  • CVE-2022-1235
    32Monitor

    Weak secrethash can be brute-forced in livehelperchat/livehelperchat

    HighCVSS 8.2No exploitEPSS 0%

    livehelperchat · live helper chatApr 5, 2022

  • CVE-2022-1176
    30Monitor

    Loose comparison causes IDOR on multiple endpoints in livehelperchat/livehelperchat

    HighCVSS 7.5No exploitEPSS 1%

    livehelperchat · live helper chatMar 31, 2022

  • CVE-2025-51403
    26Monitor

    A stored cross-site scripting (XSS) vulnerability in the department assignment editing module of of Live Helper Chat v4.60 allows attackers

    MediumCVSS 6.5Proof of conceptEPSS 1%

    livehelperchat · live helper chatJul 21, 2025

  • CVE-2022-0266
    26Monitor

    Authorization Bypass Through User-Controlled Key in livehelperchat/livehelperchat

    MediumCVSS 6.6No exploitEPSS 1%

    livehelperchat · live helper chatJan 19, 2022

  • CVE-2022-0231
    26Monitor

    Cross-Site Request Forgery (CSRF) in livehelperchat/livehelperchat

    MediumCVSS 6.5No exploitEPSS 0%

    livehelperchat · live helper chatJan 14, 2022

  • CVE-2021-4123
    26Monitor

    Cross-Site Request Forgery (CSRF) in livehelperchat/livehelperchat

    MediumCVSS 6.5No exploitEPSS 0%

    livehelperchat · live helper chatDec 16, 2021

  • CVE-2021-4049
    26Monitor

    Cross-Site Request Forgery (CSRF) in livehelperchat/livehelperchat

    MediumCVSS 6.5No exploitEPSS 0%

    livehelperchat · live helper chatDec 7, 2021

  • CVE-2017-1000059
    24Monitor

    Live Helper Chat version 2.06v and older is vulnerable to Cross-Site Scripting in the HTTP Header handling resulting in the execution of any

    MediumCVSS 6.1No exploitEPSS 1%

    livehelperchat · live helper chatJul 17, 2017

  • CVE-2020-26134
    24Monitor

    Live Helper Chat before 3.44v allows stored XSS in chat messages with an operator via BBCode.

    MediumCVSS 6.1No exploitEPSS 1%

    livehelperchat · live helper chatOct 2, 2020

  • CVE-2020-26135
    24Monitor

    Live Helper Chat before 3.44v allows reflected XSS via the setsettingajax PATH_INFO.

    MediumCVSS 6.1No exploitEPSS 1%

    livehelperchat · live helper chatOct 2, 2020

  • CVE-2021-4169
    24Monitor

    Cross-site Scripting (XSS) - Reflected in livehelperchat/livehelperchat

    MediumCVSS 6.1Proof of conceptEPSS 0%

    livehelperchat · live helper chatDec 26, 2021

  • CVE-2021-4050
    24Monitor

    Cross-site Scripting (XSS) - Stored in livehelperchat/livehelperchat

    MediumCVSS 6.1No exploitEPSS 0%

    livehelperchat · live helper chatDec 8, 2021

  • CVE-2021-4176
    24Monitor

    Cross-site Scripting (XSS) - Reflected in livehelperchat/livehelperchat

    MediumCVSS 6.1No exploitEPSS 0%

    livehelperchat · live helper chatDec 29, 2021

  • CVE-2022-1234
    24Monitor

    XSS in livehelperchat in livehelperchat/livehelperchat

    MediumCVSS 6.1No exploitEPSS 0%

    livehelperchat · live helper chatApr 6, 2022

  • CVE-2022-1530
    24Monitor

    Cross-site Scripting (XSS) in livehelperchat/livehelperchat

    MediumCVSS 6.1No exploitEPSS 0%

    livehelperchat · live helper chatApr 29, 2022

  • CVE-2025-51396
    21Monitor

    A stored cross-site scripting (XSS) vulnerability in Live Helper Chat v4.60 allows attackers to execute arbitrary web scripts or HTML via in

    MediumCVSS 5.4Proof of conceptEPSS 1%

    livehelperchat · live helper chatJul 21, 2025

  • CVE-2025-51397
    21Monitor

    A stored cross-site scripting (XSS) vulnerability in the Facebook Chat module of Live Helper Chat v4.60 allows attackers to execute arbitrar

    MediumCVSS 5.4Proof of conceptEPSS 0%

    livehelperchat · live helper chatJul 21, 2025

  • CVE-2025-51401
    21Monitor

    A stored cross-site scripting (XSS) vulnerability in the chat transfer function of Live Helper Chat v4.60 allows attackers to execute arbitr

    MediumCVSS 5.4Proof of conceptEPSS 0%

    livehelperchat · live helper chatJul 21, 2025

  • CVE-2025-51398
    21Monitor

    A stored cross-site scripting (XSS) vulnerability in the Facebook registration page of Live Helper Chat v4.60 allows attackers to execute ar

    MediumCVSS 5.4Proof of conceptEPSS 0%

    livehelperchat · live helper chatJul 21, 2025

  • CVE-2025-51400
    21Monitor

    A stored cross-site scripting (XSS) vulnerability in the Personal Canned Messages of Live Helper Chat v4.60 allows attackers to execute arbi

    MediumCVSS 5.4Proof of conceptEPSS 0%

    livehelperchat · live helper chatJul 21, 2025