Vulnerability index

Browse CVEs

39 matching
Filters 1 Clear all
Severity

Filters apply as you choose them.

Live Helper Chat MEDIUM 6.5
CVE-2026-27954

Live Helper Chat is an open-source application that enables live support websites. In versions up to and including 4.52, three chat action endpoints …

Fix: after 4.52
Fix from $1,600 2026-02-26
Live Helper Chat MEDIUM 6.5
CVE-2025-51403

A stored cross-site scripting (XSS) vulnerability in the department assignment editing module of of Live Helper Chat v4.60 allows attackers to execut…

Fix: after 4.61
Fix from $1,600 2025-07-21
Live Helper Chat MEDIUM 5.4
CVE-2025-51397

A stored cross-site scripting (XSS) vulnerability in the Facebook Chat module of Live Helper Chat v4.60 allows attackers to execute arbitrary web scr…

Fix: after 4.61
Fix from $1,600 2025-07-21
Live Helper Chat MEDIUM 5.4
CVE-2025-51398

A stored cross-site scripting (XSS) vulnerability in the Facebook registration page of Live Helper Chat v4.60 allows attackers to execute arbitrary w…

Fix: after 4.61
Fix from $1,600 2025-07-21
Live Helper Chat MEDIUM 5.4
CVE-2025-51400

A stored cross-site scripting (XSS) vulnerability in the Personal Canned Messages of Live Helper Chat v4.60 allows attackers to execute arbitrary web…

Fix: after 4.61
Fix from $1,600 2025-07-21
Live Helper Chat MEDIUM 5.4
CVE-2025-51401

A stored cross-site scripting (XSS) vulnerability in the chat transfer function of Live Helper Chat v4.60 allows attackers to execute arbitrary web s…

Fix: after 4.61
Fix from $1,600 2025-07-21
Live Helper Chat MEDIUM 5.4
CVE-2025-51396

A stored cross-site scripting (XSS) vulnerability in Live Helper Chat v4.60 allows attackers to execute arbitrary web scripts or HTML via injecting a…

Fix: after 4.61
Fix from $1,600 2025-07-21
Live Helper Chat CRITICAL 9.8
CVE-2024-27516

Server-Side Template Injection (SSTI) vulnerability in livehelperchat before 4.34v, allows remote attackers to execute arbitrary code and obtain sens…

Fix: 4.34+
Fix from $2,300 2024-02-29
Live Helper Chat MEDIUM 6.1
CVE-2022-1530

Cross-site Scripting (XSS) in GitHub repository livehelperchat/livehelperchat prior to 3.99v. The attacker can execute malicious JavaScript on the ap…

Fix: 3.99+
Fix from $1,600 2022-04-29
Live Helper Chat HIGH 8.8
CVE-2022-0935

Host Header injection in password Reset in GitHub repository livehelperchat/livehelperchat prior to 3.97.

Fix: 3.97+
Fix from $1,950 2022-04-07
Live Helper Chat MEDIUM 6.1
CVE-2022-1234

XSS in livehelperchat in GitHub repository livehelperchat/livehelperchat prior to 3.97. This vulnerability has the potential to deface websites, resu…

Fix: 3.97+
Fix from $1,600 2022-04-06
Live Helper Chat HIGH 8.2
CVE-2022-1235

Weak secrethash can be brute-forced in GitHub repository livehelperchat/livehelperchat prior to 3.96.

Fix: 3.96+
Fix from $1,950 2022-04-05
Live Helper Chat HIGH 8.1
CVE-2022-1213

SSRF filter bypass port 80, 433 in GitHub repository livehelperchat/livehelperchat prior to 3.67v. An attacker could make the application perform arb…

Fix: 3.97+
Fix from $1,950 2022-04-05
Live Helper Chat HIGH 7.5
CVE-2022-1176

Loose comparison causes IDOR on multiple endpoints in GitHub repository livehelperchat/livehelperchat prior to 3.96.

Fix: 3.96+
Fix from $1,950 2022-03-31
Live Helper Chat HIGH 8.1
CVE-2022-1191

SSRF on index.php/cobrowse/proxycss/ in GitHub repository livehelperchat/livehelperchat prior to 3.96.

Fix: 3.96+
Fix from $1,950 2022-03-31
Live Helper Chat MEDIUM 5.4
CVE-2022-0612

Cross-site Scripting (XSS) - Stored in Packagist remdex/livehelperchat prior to 3.93v.

Fix: after 3.92
Fix from $1,600 2022-02-16
Live Helper Chat MEDIUM 5.4
CVE-2022-0502

Cross-site Scripting (XSS) - Stored in Packagist remdex/livehelperchat prior to 3.93v.

Fix: after 3.92
Fix from $1,600 2022-02-06
Live Helper Chat MEDIUM 5.4
CVE-2022-0395

Cross-site Scripting (XSS) - Stored in Packagist remdex/livehelperchat prior to 3.93v.

Fix: 3.93+
Fix from $1,600 2022-01-28
Live Helper Chat MEDIUM 5.4
CVE-2022-0394

Cross-site Scripting (XSS) - Stored in Packagist remdex/livehelperchat prior to 3.93v.

Fix: 3.93+
Fix from $1,600 2022-01-28
Livehelperchat MEDIUM 5.4
CVE-2022-0370

Cross-site Scripting (XSS) - Stored in Packagist remdex/livehelperchat prior to 3.93v.

Fix: 3.93v+
Fix from $1,600 2022-01-27
Livehelperchat MEDIUM 5.4
CVE-2022-0387

Cross-site Scripting (XSS) - Stored in Packagist remdex/livehelperchat prior to 3.93v.

Fix: 3.93v+
Fix from $1,600 2022-01-27
Live Helper Chat MEDIUM 5.4
CVE-2022-0374

Cross-site Scripting (XSS) - Stored in Packagist remdex/livehelperchat prior to 3.93v.

Fix: 3.93+
Fix from $1,600 2022-01-26
Live Helper Chat MEDIUM 6.6
CVE-2022-0266

Authorization Bypass Through User-Controlled Key in Packagist remdex/livehelperchat prior to 3.92v.

Fix: 3.92+
Fix from $1,600 2022-01-19
Livehelperchat MEDIUM 5.4
CVE-2022-0253

livehelperchat is vulnerable to Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')

Fix: 3.91+
Fix from $1,600 2022-01-17
Live Helper Chat MEDIUM 6.5
CVE-2022-0231

livehelperchat is vulnerable to Cross-Site Request Forgery (CSRF)

Fix: after 3.91
Fix from $1,600 2022-01-14
Live Helper Chat MEDIUM 5.3
CVE-2022-0083

livehelperchat is vulnerable to Generation of Error Message Containing Sensitive Information

Fix: 3.91+
Fix from $1,600 2022-01-04
Live Helper Chat MEDIUM 6.1
CVE-2021-4176

livehelperchat is vulnerable to Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')

Fix: 3.91+
Fix from $1,600 2021-12-29
Live Helper Chat MEDIUM 5.4
CVE-2021-4175

livehelperchat is vulnerable to Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')

Fix: 3.91+
Fix from $1,600 2021-12-29
Live Helper Chat MEDIUM 5.4
CVE-2021-4179

livehelperchat is vulnerable to Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')

Fix: 3.91+
Fix from $1,600 2021-12-28
Live Helper Chat MEDIUM 5.3
CVE-2021-4177

livehelperchat is vulnerable to Generation of Error Message Containing Sensitive Information

Fix: 3.91+
Fix from $1,600 2021-12-28