Browse CVEs

MEDIUM 6.5 CVE-2026-27954 Live Helper Chat is an open-source application that enables live support websites. In versions up to and including 4.52, three chat action endpoints … Live Helper Chat after 4.52 Fix from $1,6002026-02-26 MEDIUM 6.5 CVE-2025-51403 A stored cross-site scripting (XSS) vulnerability in the department assignment editing module of of Live Helper Chat v4.60 allows attackers to execut… Live Helper Chat after 4.61 Fix from $1,6002025-07-21 MEDIUM 5.4 CVE-2025-51397 A stored cross-site scripting (XSS) vulnerability in the Facebook Chat module of Live Helper Chat v4.60 allows attackers to execute arbitrary web scr… Live Helper Chat after 4.61 Fix from $1,6002025-07-21 MEDIUM 5.4 CVE-2025-51398 A stored cross-site scripting (XSS) vulnerability in the Facebook registration page of Live Helper Chat v4.60 allows attackers to execute arbitrary w… Live Helper Chat after 4.61 Fix from $1,6002025-07-21 MEDIUM 5.4 CVE-2025-51400 A stored cross-site scripting (XSS) vulnerability in the Personal Canned Messages of Live Helper Chat v4.60 allows attackers to execute arbitrary web… Live Helper Chat after 4.61 Fix from $1,6002025-07-21 MEDIUM 5.4 CVE-2025-51401 A stored cross-site scripting (XSS) vulnerability in the chat transfer function of Live Helper Chat v4.60 allows attackers to execute arbitrary web s… Live Helper Chat after 4.61 Fix from $1,6002025-07-21 MEDIUM 5.4 CVE-2025-51396 A stored cross-site scripting (XSS) vulnerability in Live Helper Chat v4.60 allows attackers to execute arbitrary web scripts or HTML via injecting a… Live Helper Chat after 4.61 Fix from $1,6002025-07-21 CRITICAL 9.8 CVE-2024-27516 Server-Side Template Injection (SSTI) vulnerability in livehelperchat before 4.34v, allows remote attackers to execute arbitrary code and obtain sens… Live Helper Chat 4.34+ Fix from $2,3002024-02-29 MEDIUM 6.1 CVE-2022-1530 Cross-site Scripting (XSS) in GitHub repository livehelperchat/livehelperchat prior to 3.99v. The attacker can execute malicious JavaScript on the ap… Live Helper Chat 3.99+ Fix from $1,6002022-04-29 HIGH 8.8 CVE-2022-0935 Host Header injection in password Reset in GitHub repository livehelperchat/livehelperchat prior to 3.97. Live Helper Chat 3.97+ Fix from $1,9502022-04-07 MEDIUM 6.1 CVE-2022-1234 XSS in livehelperchat in GitHub repository livehelperchat/livehelperchat prior to 3.97. This vulnerability has the potential to deface websites, resu… Live Helper Chat 3.97+ Fix from $1,6002022-04-06 HIGH 8.2 CVE-2022-1235 Weak secrethash can be brute-forced in GitHub repository livehelperchat/livehelperchat prior to 3.96. Live Helper Chat 3.96+ Fix from $1,9502022-04-05 HIGH 8.1 CVE-2022-1213 SSRF filter bypass port 80, 433 in GitHub repository livehelperchat/livehelperchat prior to 3.67v. An attacker could make the application perform arb… Live Helper Chat 3.97+ Fix from $1,9502022-04-05 HIGH 7.5 CVE-2022-1176 Loose comparison causes IDOR on multiple endpoints in GitHub repository livehelperchat/livehelperchat prior to 3.96. Live Helper Chat 3.96+ Fix from $1,9502022-03-31 HIGH 8.1 CVE-2022-1191 SSRF on index.php/cobrowse/proxycss/ in GitHub repository livehelperchat/livehelperchat prior to 3.96. Live Helper Chat 3.96+ Fix from $1,9502022-03-31 MEDIUM 5.4 CVE-2022-0612 Cross-site Scripting (XSS) - Stored in Packagist remdex/livehelperchat prior to 3.93v. Live Helper Chat after 3.92 Fix from $1,6002022-02-16 MEDIUM 5.4 CVE-2022-0502 Cross-site Scripting (XSS) - Stored in Packagist remdex/livehelperchat prior to 3.93v. Live Helper Chat after 3.92 Fix from $1,6002022-02-06 MEDIUM 5.4 CVE-2022-0395 Cross-site Scripting (XSS) - Stored in Packagist remdex/livehelperchat prior to 3.93v. Live Helper Chat 3.93+ Fix from $1,6002022-01-28 MEDIUM 5.4 CVE-2022-0394 Cross-site Scripting (XSS) - Stored in Packagist remdex/livehelperchat prior to 3.93v. Live Helper Chat 3.93+ Fix from $1,6002022-01-28 MEDIUM 5.4 CVE-2022-0370 Cross-site Scripting (XSS) - Stored in Packagist remdex/livehelperchat prior to 3.93v. Livehelperchat 3.93v+ Fix from $1,6002022-01-27 MEDIUM 5.4 CVE-2022-0387 Cross-site Scripting (XSS) - Stored in Packagist remdex/livehelperchat prior to 3.93v. Livehelperchat 3.93v+ Fix from $1,6002022-01-27 MEDIUM 5.4 CVE-2022-0374 Cross-site Scripting (XSS) - Stored in Packagist remdex/livehelperchat prior to 3.93v. Live Helper Chat 3.93+ Fix from $1,6002022-01-26 MEDIUM 6.6 CVE-2022-0266 Authorization Bypass Through User-Controlled Key in Packagist remdex/livehelperchat prior to 3.92v. Live Helper Chat 3.92+ Fix from $1,6002022-01-19 MEDIUM 5.4 CVE-2022-0253 livehelperchat is vulnerable to Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Livehelperchat 3.91+ Fix from $1,6002022-01-17 MEDIUM 6.5 CVE-2022-0231 livehelperchat is vulnerable to Cross-Site Request Forgery (CSRF) Live Helper Chat after 3.91 Fix from $1,6002022-01-14 MEDIUM 5.3 CVE-2022-0083 livehelperchat is vulnerable to Generation of Error Message Containing Sensitive Information Live Helper Chat 3.91+ Fix from $1,6002022-01-04 MEDIUM 6.1 CVE-2021-4176 livehelperchat is vulnerable to Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Live Helper Chat 3.91+ Fix from $1,6002021-12-29 MEDIUM 5.4 CVE-2021-4175 livehelperchat is vulnerable to Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Live Helper Chat 3.91+ Fix from $1,6002021-12-29 MEDIUM 5.4 CVE-2021-4179 livehelperchat is vulnerable to Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Live Helper Chat 3.91+ Fix from $1,6002021-12-28 MEDIUM 5.3 CVE-2021-4177 livehelperchat is vulnerable to Generation of Error Message Containing Sensitive Information Live Helper Chat 3.91+ Fix from $1,6002021-12-28