remdex/livehelperchat

23 results · Feed

• Critical 9.8
  CVE-2024-27516

  livehelperchat Server-Side Template Injection

  Server-Side Template Injection (SSTI) vulnerability in livehelperchat before 4.34v, allows remote attackers to execute arbitrary code and obtain sensitive information via the search parameter in lhc_web/modules/lhfaq/faqweight.php.

  remdex/livehelperchat Packagist
  Feb 28, 2024
• Low 3.8
  CVE-2022-1530

  Cross-site Scripting (XSS) in livehelperchat/livehelperchat

  Cross-site Scripting (XSS) in GitHub repository livehelperchat/livehelperchat prior to 3.99v. The attacker can execute malicious JavaScript on the application.

  LiveHelperChat livehelperchat/livehelperchat remdex/livehelperchat Packagist
  Apr 29, 2022
• High 7.5
  CVE-2022-1235

  Weak secrethash can be brute-forced in livehelperchat/livehelperchat

  Weak secrethash can be brute-forced in GitHub repository livehelperchat/livehelperchat prior to 3.96.

  LiveHelperChat livehelperchat/livehelperchat remdex/livehelperchat Packagist
  Apr 5, 2022
• High 7.7
  CVE-2022-1213

  SSRF filter bypass port 80, 433 in livehelperchat/livehelperchat

  SSRF filter bypass port 80, 433 in GitHub repository livehelperchat/livehelperchat prior to 3.67v. An attacker could make the application perform arbitrary requests, bypass CVE-2022-1191

  LiveHelperChat livehelperchat/livehelperchat remdex/livehelperchat Packagist
  Apr 5, 2022
• High 7.5
  CVE-2022-1176

  Loose comparison causes IDOR on multiple endpoints in livehelperchat/livehelperchat

  Loose comparison causes IDOR on multiple endpoints in GitHub repository livehelperchat/livehelperchat prior to 3.96.

  LiveHelperChat livehelperchat/livehelperchat remdex/livehelperchat Packagist
  Mar 31, 2022
• Medium 6.7
  CVE-2022-0612

  Cross-site Scripting (XSS) - Stored in livehelperchat/livehelperchat

  Cross-site Scripting (XSS) - Stored in Packagist remdex/livehelperchat prior to 3.93v.

  LiveHelperChat livehelperchat/livehelperchat remdex/livehelperchat Packagist
  Feb 16, 2022
• Medium 6.5
  CVE-2022-0502

  Cross-site Scripting (XSS) - Stored in livehelperchat/livehelperchat

  Cross-site Scripting (XSS) - Stored in Packagist remdex/livehelperchat prior to 3.93v.

  LiveHelperChat livehelperchat/livehelperchat remdex/livehelperchat Packagist
  Feb 6, 2022
• Medium 6.5
  CVE-2022-0395

  Cross-site Scripting (XSS) - Stored in livehelperchat/livehelperchat

  Cross-site Scripting (XSS) - Stored in Packagist remdex/livehelperchat prior to 3.93v.

  LiveHelperChat livehelperchat/livehelperchat remdex/livehelperchat Packagist
  Jan 28, 2022
• Medium 5.3
  CVE-2022-0394

  Cross-site Scripting (XSS) - Stored in livehelperchat/livehelperchat

  Cross-site Scripting (XSS) - Stored in Packagist remdex/livehelperchat prior to 3.93v.

  LiveHelperChat livehelperchat/livehelperchat remdex/livehelperchat Packagist
  Jan 28, 2022
• High 7.1
  CVE-2022-0370

  Cross-site Scripting (XSS) - Stored in livehelperchat/livehelperchat

  Cross-site Scripting (XSS) - Stored in Packagist remdex/livehelperchat prior to 3.93v.

  LiveHelperChat livehelperchat/livehelperchat remdex/livehelperchat Packagist
  Jan 27, 2022
• Medium 6.3
  CVE-2022-0387

  Cross-site Scripting (XSS) - Stored in livehelperchat/livehelperchat

  Cross-site Scripting (XSS) - Stored in Packagist remdex/livehelperchat prior to 3.93v.

  LiveHelperChat livehelperchat/livehelperchat remdex/livehelperchat Packagist
  Jan 27, 2022
• Medium 6.5
  CVE-2022-0375

  Cross-site Scripting (XSS) - Stored in livehelperchat/livehelperchat

  Cross-site Scripting (XSS) - Stored in Packagist remdex/livehelperchat prior to 3.93v.

  LiveHelperChat livehelperchat/livehelperchat remdex/livehelperchat Packagist
  Jan 26, 2022
• Medium 6.5
  CVE-2022-0374

  Cross-site Scripting (XSS) - Stored in livehelperchat/livehelperchat

  Cross-site Scripting (XSS) - Stored in Packagist remdex/livehelperchat prior to 3.93v.

  LiveHelperChat livehelperchat/livehelperchat remdex/livehelperchat Packagist
  Jan 26, 2022
• Medium 6.5
  CVE-2022-0266

  Authorization Bypass Through User-Controlled Key in livehelperchat/livehelperchat

  Authorization Bypass Through User-Controlled Key in Packagist remdex/livehelperchat prior to 3.92v.

  LiveHelperChat livehelperchat/livehelperchat remdex/livehelperchat Packagist
  Jan 19, 2022
• High 7.1
  CVE-2022-0253

  Cross-site Scripting (XSS) - Stored in livehelperchat/livehelperchat

  livehelperchat is vulnerable to Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')

  LiveHelperChat livehelperchat/livehelperchat remdex/livehelperchat Packagist
  Jan 17, 2022
• Medium 4.3
  CVE-2022-0226

  Cross-Site Request Forgery (CSRF) in livehelperchat/livehelperchat

  livehelperchat is vulnerable to Cross-Site Request Forgery (CSRF)

  LiveHelperChat livehelperchat/livehelperchat remdex/livehelperchat Packagist
  Jan 14, 2022
• Medium 5.7
  CVE-2022-0231

  Cross-Site Request Forgery (CSRF) in livehelperchat/livehelperchat

  livehelperchat is vulnerable to Cross-Site Request Forgery (CSRF)

  LiveHelperChat livehelperchat/livehelperchat remdex/livehelperchat Packagist
  Jan 14, 2022
• High 7.3
  CVE-2022-0083

  Generation of Error Message Containing Sensitive Information in livehelperchat/livehelperchat

  livehelperchat is vulnerable to Generation of Error Message Containing Sensitive Information

  LiveHelperChat livehelperchat/livehelperchat remdex/livehelperchat Packagist
  Jan 4, 2022
• Medium 6.5
  CVE-2021-4131

  Cross-Site Request Forgery (CSRF) in livehelperchat/livehelperchat

  livehelperchat is vulnerable to Cross-Site Request Forgery (CSRF)

  LiveHelperChat livehelperchat/livehelperchat remdex/livehelperchat Packagist
  Dec 18, 2021
• High 7.3
  CVE-2021-4132

  Cross-site Scripting (XSS) - Stored in livehelperchat/livehelperchat

  livehelperchat is vulnerable to Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')

  LiveHelperChat livehelperchat/livehelperchat remdex/livehelperchat Packagist
  Dec 17, 2021
• Medium 6.5
  CVE-2021-4123

  Cross-Site Request Forgery (CSRF) in livehelperchat/livehelperchat

  livehelperchat is vulnerable to Cross-Site Request Forgery (CSRF)

  LiveHelperChat livehelperchat/livehelperchat remdex/livehelperchat Packagist
  Dec 16, 2021
• Medium 6.1
  CVE-2021-4050

  Cross-site Scripting (XSS) - Stored in livehelperchat/livehelperchat

  livehelperchat is vulnerable to Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')

  LiveHelperChat livehelperchat/livehelperchat remdex/livehelperchat Packagist
  Dec 8, 2021
• Medium 4.3
  CVE-2021-4049

  Cross-Site Request Forgery (CSRF) in livehelperchat/livehelperchat

  livehelperchat is vulnerable to Cross-Site Request Forgery (CSRF)

  LiveHelperChat livehelperchat/livehelperchat remdex/livehelperchat Packagist
  Dec 7, 2021