Vulnerabilidades em LiveHelperChat

35 resultados
Análise Vexday

LiveHelperChat apresenta 4 vulnerabilidades registradas, com 1 divulgada nos últimos 90 dias, indicando atividade recente de descoberta. Nenhuma vulnerabilidade está sob exploração ativa conhecida (KEV) e não há críticas CVSS, reduzindo o risco imediato. A fraqueza dominante é CWE-79 (Cross-site Scripting), típica de plataformas web, requerendo validação de entrada como medida prioritária.

CVE-2022-1213HIGHSSRF filter bypass port 80, 433 in livehelperchat/livehelperchatEPSS 0.6%CVE-2022-1235HIGHWeak secrethash can be brute-forced in livehelperchat/livehelperchatEPSS 0.6%CVE-2022-0394MEDIUMCross-site Scripting (XSS) - Stored in livehelperchat/livehelperchatEPSS 0.5%CVE-2021-4131MEDIUMCross-Site Request Forgery (CSRF) in livehelperchat/livehelperchatEPSS 0.5%CVE-2021-4175MEDIUMCross-site Scripting (XSS) - Stored in livehelperchat/livehelperchatEPSS 0.5%CVE-2022-0231MEDIUMCross-Site Request Forgery (CSRF) in livehelperchat/livehelperchatEPSS 0.5%CVE-2021-4123MEDIUMCross-Site Request Forgery (CSRF) in livehelperchat/livehelperchatEPSS 0.5%CVE-2021-4179MEDIUMCross-site Scripting (XSS) - Stored in livehelperchat/livehelperchatEPSS 0.5%CVE-2022-0245MEDIUMCross-Site Request Forgery (CSRF) in livehelperchat/livehelperchatEPSS 0.4%CVE-2022-0226MEDIUMCross-Site Request Forgery (CSRF) in livehelperchat/livehelperchatEPSS 0.4%CVE-2021-4049MEDIUMCross-Site Request Forgery (CSRF) in livehelperchat/livehelperchatEPSS 0.4%CVE-2026-44633HIGHLive Helper Chat: REST API chat update accepts arbitrary chat fields across department boundariesEPSS 0.3%CVE-2025-7435MEDIUMLiveHelperChat lhc-php-resque Extension List list cross site scriptingEPSS 0.3%CVE-2026-0483MEDIUMStored Cross-Site Scripting (XSS) vulnerability in LiveHelperChatEPSS 0.3%CVE-2026-27954MEDIUMLiveHelperChat has department-level authorization bypass in holdaction, blockuser, and transferchat endpointsEPSS 0.2%