Vulnerabilities in LiveHelperChat
35 resultsCVE-2022-1213HIGHSSRF filter bypass port 80, 433 in livehelperchat/livehelperchatEPSS 0.6%CVE-2022-1235HIGHWeak secrethash can be brute-forced in livehelperchat/livehelperchatEPSS 0.5%CVE-2022-0394MEDIUMCross-site Scripting (XSS) - Stored in livehelperchat/livehelperchatEPSS 0.5%CVE-2021-4131MEDIUMCross-Site Request Forgery (CSRF) in livehelperchat/livehelperchatEPSS 0.5%CVE-2021-4175MEDIUMCross-site Scripting (XSS) - Stored in livehelperchat/livehelperchatEPSS 0.5%CVE-2022-0231MEDIUMCross-Site Request Forgery (CSRF) in livehelperchat/livehelperchatEPSS 0.5%CVE-2021-4123MEDIUMCross-Site Request Forgery (CSRF) in livehelperchat/livehelperchatEPSS 0.5%CVE-2021-4179MEDIUMCross-site Scripting (XSS) - Stored in livehelperchat/livehelperchatEPSS 0.5%CVE-2022-0245MEDIUMCross-Site Request Forgery (CSRF) in livehelperchat/livehelperchatEPSS 0.4%CVE-2022-0226MEDIUMCross-Site Request Forgery (CSRF) in livehelperchat/livehelperchatEPSS 0.4%CVE-2021-4049MEDIUMCross-Site Request Forgery (CSRF) in livehelperchat/livehelperchatEPSS 0.4%CVE-2026-44633HIGHLive Helper Chat: REST API chat update accepts arbitrary chat fields across department boundariesEPSS 0.3%CVE-2025-7435MEDIUMLiveHelperChat lhc-php-resque Extension List list cross site scriptingEPSS 0.2%CVE-2026-0483MEDIUMStored Cross-Site Scripting (XSS) vulnerability in LiveHelperChatEPSS 0.2%CVE-2026-27954MEDIUMLiveHelperChat has department-level authorization bypass in holdaction, blockuser, and transferchat endpointsEPSS 0.2%