CVE-2020-26134

CVE-2020-26134

EPSS 1.1%

Live Helper Chat before 3.44v allows stored XSS in chat messages with an operator via BBCode.

Affected products

Want to know if your infrastructure is exposed to this?

Talk to TrueHacking →

References

https://github.com/LiveHelperChat/livehelperchat/commit/a131b937dd6a87271ed1c0c8b8deb8710cf78f58 https://github.com/rekter0/exploits/tree/master/CVE-2020-26134 https://livehelperchat.com/3.44v-security-update-and-few-other-bits-586a.html