Vulnerabilities in livehelperchat

35 results
Vexday analysis

O livehelperchat apresenta 31 vulnerabilidades catalogadas, predominantemente XSS (CWE-79), mas nenhuma explorada ativamente no momento e sem críticas confirmadas. A ausência de descobertas recentes sugere que o risco está estabilizado, porém a quantidade de falhas de validação de entrada merece atenção contínua em ambientes expostos.

CVE-2022-1213HIGHSSRF filter bypass port 80, 433 in livehelperchat/livehelperchatEPSS 0.6%CVE-2022-1235HIGHWeak secrethash can be brute-forced in livehelperchat/livehelperchatEPSS 0.6%CVE-2022-0394MEDIUMCross-site Scripting (XSS) - Stored in livehelperchat/livehelperchatEPSS 0.5%CVE-2021-4131MEDIUMCross-Site Request Forgery (CSRF) in livehelperchat/livehelperchatEPSS 0.5%CVE-2021-4175MEDIUMCross-site Scripting (XSS) - Stored in livehelperchat/livehelperchatEPSS 0.5%CVE-2022-0231MEDIUMCross-Site Request Forgery (CSRF) in livehelperchat/livehelperchatEPSS 0.5%CVE-2021-4123MEDIUMCross-Site Request Forgery (CSRF) in livehelperchat/livehelperchatEPSS 0.5%CVE-2021-4179MEDIUMCross-site Scripting (XSS) - Stored in livehelperchat/livehelperchatEPSS 0.5%CVE-2022-0245MEDIUMCross-Site Request Forgery (CSRF) in livehelperchat/livehelperchatEPSS 0.4%CVE-2022-0226MEDIUMCross-Site Request Forgery (CSRF) in livehelperchat/livehelperchatEPSS 0.4%CVE-2021-4049MEDIUMCross-Site Request Forgery (CSRF) in livehelperchat/livehelperchatEPSS 0.4%CVE-2026-44633HIGHLive Helper Chat: REST API chat update accepts arbitrary chat fields across department boundariesEPSS 0.3%CVE-2025-7435MEDIUMLiveHelperChat lhc-php-resque Extension List list cross site scriptingEPSS 0.3%CVE-2026-0483MEDIUMStored Cross-Site Scripting (XSS) vulnerability in LiveHelperChatEPSS 0.3%CVE-2026-27954MEDIUMLiveHelperChat has department-level authorization bypass in holdaction, blockuser, and transferchat endpointsEPSS 0.2%