TI-2026-22298 CVE-2026-27954
LiveHelperChat has department-level authorization bypass in holdaction, blockuser, and transferchat endpoints
Priority LOW 28
Live Helper Chat is an open-source application that enables live support websites.
Vulnerabilities
38 records
TI-2025-32325 CVE-2025-51403 · GHSA-m4hp-gwc8-p3gj
A stored cross-site scripting (XSS) vulnerability in the department assignment editing…
Priority MEDIUM 62
A stored cross-site scripting (XSS) vulnerability in the department assignment editing module of of Live Helper Chat v4.60 allows attackers to execute arbitrary web scripts or HTML via injecting a crafted payload into th…
TI-2025-32324 CVE-2025-51401 · GHSA-f57q-2vg6-g2qp
A stored cross-site scripting (XSS) vulnerability in the chat transfer function of Live…
Priority MEDIUM 58
A stored cross-site scripting (XSS) vulnerability in the chat transfer function of Live Helper Chat v4.60 allows attackers to execute arbitrary web scripts or HTML via injecting a crafted payload into the operator name p…
TI-2025-32323 CVE-2025-51400 · GHSA-7mwh-2gr8-fp7j
A stored cross-site scripting (XSS) vulnerability in the Personal Canned Messages of Live…
Priority MEDIUM 58
A stored cross-site scripting (XSS) vulnerability in the Personal Canned Messages of Live Helper Chat v4.60 allows attackers to execute arbitrary web scripts or HTML via injecting a crafted payload.
TI-2025-32322 CVE-2025-51398 · GHSA-hx4h-p78r-mxcr
A stored cross-site scripting (XSS) vulnerability in the Facebook registration page of…
Priority MEDIUM 58
A stored cross-site scripting (XSS) vulnerability in the Facebook registration page of Live Helper Chat v4.60 allows attackers to execute arbitrary web scripts or HTML via injecting a crafted payload into the Name parame…
TI-2025-32321 CVE-2025-51397 · GHSA-jr5r-6hpc-772g
A stored cross-site scripting (XSS) vulnerability in the Facebook Chat module of Live…
Priority MEDIUM 58
A stored cross-site scripting (XSS) vulnerability in the Facebook Chat module of Live Helper Chat v4.60 allows attackers to execute arbitrary web scripts or HTML via injecting a crafted payload into the Surname parameter…
TI-2025-32320 CVE-2025-51396 · GHSA-m3rh-w8cj-vvpw
A stored cross-site scripting (XSS) vulnerability in Live Helper Chat v4.60 allows…
Priority MEDIUM 58
A stored cross-site scripting (XSS) vulnerability in Live Helper Chat v4.60 allows attackers to execute arbitrary web scripts or HTML via injecting a crafted payload into the Telegram Bot Username parameter.
TI-2024-18290 CVE-2024-27516 · GHSA-v4cp-2q7v-hg9q
Server-Side Template Injection (SSTI) vulnerability in livehelperchat before 4.34v…
Priority HIGH 82
Server-Side Template Injection (SSTI) vulnerability in livehelperchat before 4.34v, allows remote attackers to execute arbitrary code and obtain sensitive information via the search parameter in lhc_web/modules/lhfaq/faq…
TI-2022-01403 CVE-2022-1530 · GHSA-9hgc-wpc5-v8p9
Cross-site Scripting (XSS) in livehelperchat/livehelperchat
Priority LOW 28
Cross-site Scripting (XSS) in GitHub repository livehelperchat/livehelperchat prior to 3.99v.
TI-2022-00834 CVE-2022-0935 · GHSA-5f87-fvjm-hrf5
Host Header injection in password Reset in livehelperchat/livehelperchat
Priority MEDIUM 41
Host Header injection in password Reset in GitHub repository livehelperchat/livehelperchat prior to 3.97.
TI-2022-01121 CVE-2022-1234 · GHSA-jmjp-h79x-9f5r
XSS in livehelperchat in livehelperchat/livehelperchat
Priority LOW 28
XSS in livehelperchat in GitHub repository livehelperchat/livehelperchat prior to 3.97.
TI-2022-01122 CVE-2022-1235 · GHSA-vx8v-g3p3-88vg
Weak secrethash can be brute-forced in livehelperchat/livehelperchat
Priority LOW 36
Weak secrethash can be brute-forced in GitHub repository livehelperchat/livehelperchat prior to 3.96.
TI-2022-01101 CVE-2022-1213 · GHSA-hhr9-7xvh-8xgc
SSRF filter bypass port 80, 433 in livehelperchat/livehelperchat
Priority LOW 36
SSRF filter bypass port 80, 433 in GitHub repository livehelperchat/livehelperchat prior to 3.67v.
TI-2022-01065 CVE-2022-1176 · GHSA-5cmw-fhq9-8fhh
Loose comparison causes IDOR on multiple endpoints in livehelperchat/livehelperchat
Priority LOW 35
Loose comparison causes IDOR on multiple endpoints in GitHub repository livehelperchat/livehelperchat prior to 3.96.
TI-2022-01080 CVE-2022-1191 · GHSA-8m92-98p8-gpmh
SSRF on index.php/cobrowse/proxycss/ in livehelperchat/livehelperchat
Priority LOW 37
SSRF on index.php/cobrowse/proxycss/ in GitHub repository livehelperchat/livehelperchat prior to 3.96.
TI-2022-00529 CVE-2022-0612 · GHSA-h2fj-77wh-fh5w
Cross-site Scripting (XSS) - Stored in livehelperchat/livehelperchat
Priority LOW 25
Cross-site Scripting (XSS) - Stored in Packagist remdex/livehelperchat prior to 3.93v.
TI-2022-00422 CVE-2022-0502 · GHSA-57qf-82hh-2hmc
Cross-site Scripting (XSS) - Stored in livehelperchat/livehelperchat
Priority LOW 25
Cross-site Scripting (XSS) - Stored in Packagist remdex/livehelperchat prior to 3.93v.
TI-2022-00320 CVE-2022-0395 · GHSA-54qq-9chj-rxhv
Cross-site Scripting (XSS) - Stored in livehelperchat/livehelperchat
Priority LOW 25
Cross-site Scripting (XSS) - Stored in Packagist remdex/livehelperchat prior to 3.93v.
TI-2022-00319 CVE-2022-0394 · GHSA-vwxp-9qmf-w299
Cross-site Scripting (XSS) - Stored in livehelperchat/livehelperchat
Priority LOW 25
Cross-site Scripting (XSS) - Stored in Packagist remdex/livehelperchat prior to 3.93v.
TI-2022-00300 CVE-2022-0375 · GHSA-x3g3-jh26-76cf
Cross-site Scripting (XSS) - Stored in livehelperchat/livehelperchat
Priority LOW 23
Cross-site Scripting (XSS) - Stored in Packagist remdex/livehelperchat prior to 3.93v.
TI-2022-00299 CVE-2022-0374 · GHSA-59qh-g7m4-j9m9
Cross-site Scripting (XSS) - Stored in livehelperchat/livehelperchat
Priority LOW 26
Cross-site Scripting (XSS) - Stored in Packagist remdex/livehelperchat prior to 3.93v.
TI-2022-00200 CVE-2022-0266 · GHSA-c7fm-jx59-wjf6
Authorization Bypass Through User-Controlled Key in livehelperchat/livehelperchat
Priority LOW 31
Authorization Bypass Through User-Controlled Key in Packagist remdex/livehelperchat prior to 3.92v.
TI-2022-00163 CVE-2022-0226 · GHSA-6jmh-9gqm-5xrx
Cross-Site Request Forgery (CSRF) in livehelperchat/livehelperchat
Priority LOW 20
livehelperchat is vulnerable to Cross-Site Request Forgery (CSRF)
TI-2022-00167 CVE-2022-0231 · GHSA-8m28-w6xg-35hw
Cross-Site Request Forgery (CSRF) in livehelperchat/livehelperchat
Priority LOW 29
livehelperchat is vulnerable to Cross-Site Request Forgery (CSRF)
TI-2022-00034 CVE-2022-0083 · GHSA-4xww-6h7v-29jg
Generation of Error Message Containing Sensitive Information in livehelperchat/livehelperchat
Priority LOW 26
livehelperchat is vulnerable to Generation of Error Message Containing Sensitive Information