livehelperchat

Records45All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical1CVSS 9.0–10.0

CVSS high7CVSS 7.0–8.9

Exploited now

livehelperchat records in CISA KEV

No livehelperchat vulnerabilities are listed in CISA KEV.

Products in the NVD configurations · select one to filter the records

4 records in Livehelperchat · all components

TI-2022-00295 CVE-2022-0370 · GHSA-8wcc-f2vq-h4gx

LOW 26

Cross-site Scripting (XSS) - Stored in Packagist remdex/livehelperchat prior to 3.93v.

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00766 Published 2022-01-27 Fixed in 3.93v, 3.93 CWE-79

TI-2022-00188 CVE-2022-0253 · GHSA-5r9v-8w62-r26j

LOW 26

livehelperchat is vulnerable to Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00813 Published 2022-01-17 No fix listed CWE-79

TI-2022-00312 CVE-2022-0387 · GHSA-w4hp-pcp8-qhf3

LOW 25

Cross-site Scripting (XSS) - Stored in Packagist remdex/livehelperchat prior to 3.93v.

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00634 Published 2022-01-27 Fixed in 3.93v, 3.93 CWE-79

TI-2022-00180 CVE-2022-0245 · GHSA-vxh4-x6gv-mphf

LOW 20

Cross-Site Request Forgery (CSRF) in GitHub repository livehelperchat/livehelperchat prior to 2.0.

CVSS 3.1MEDIUM 4.3 Network No auth User interaction EPSS 0.00439 Published 2022-01-18 Fixed in 2.0 CWE-352