CVE search
Every published CVE plus open-source advisories (NVD, OSV, GitHub), with CVSS, EPSS and whether it is being exploited in the wild (CISA KEV). Updated every few hours. Our scans match these against the technologies they detect.
Every published CVE plus open-source advisories (NVD, OSV, GitHub), with CVSS, EPSS and whether it is being exploited in the wild (CISA KEV). Updated every few hours. Our scans match these against the technologies they detect.
Cross-Site Request Forgery (CSRF) in GitHub repository livehelperchat/livehelperchat prior to 2.0. |
| 18/01/2022 |
| CVE-2022-0253 | MEDIUM5.4 | livehelperchat is vulnerable to Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') | 17/01/2022 |
| CVE-2022-0226 | MEDIUM4.3 | livehelperchat is vulnerable to Cross-Site Request Forgery (CSRF) | 14/01/2022 |
| CVE-2022-0231 | MEDIUM6.5 | livehelperchat is vulnerable to Cross-Site Request Forgery (CSRF) | 14/01/2022 |
| CVE-2022-0083 | MEDIUM5.3 | livehelperchat is vulnerable to Generation of Error Message Containing Sensitive Information | 04/01/2022 |
| CVE-2021-4176 | MEDIUM6.1 | livehelperchat is vulnerable to Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') | 29/12/2021 |
| CVE-2021-4175 | MEDIUM5.4 | livehelperchat is vulnerable to Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') | 29/12/2021 |
| CVE-2021-4179 | MEDIUM5.4 | livehelperchat is vulnerable to Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') | 28/12/2021 |
| CVE-2021-4177 | MEDIUM5.3 | livehelperchat is vulnerable to Generation of Error Message Containing Sensitive Information | 28/12/2021 |
| CVE-2021-4169 | MEDIUM6.1 | livehelperchat is vulnerable to Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') | 26/12/2021 |
| CVE-2021-4131 | HIGH8.8 | livehelperchat is vulnerable to Cross-Site Request Forgery (CSRF) | 18/12/2021 |
| CVE-2021-4132 | MEDIUM5.4 | livehelperchat is vulnerable to Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') | 17/12/2021 |
| CVE-2021-4123 | MEDIUM6.5 | livehelperchat is vulnerable to Cross-Site Request Forgery (CSRF) | 16/12/2021 |
| CVE-2021-4049 | MEDIUM6.5 | livehelperchat is vulnerable to Cross-Site Request Forgery (CSRF) | 07/12/2021 |
| CVE-2020-26135 | MEDIUM6.1 | Live Helper Chat before 3.44v allows reflected XSS via the setsettingajax PATH_INFO. | 02/10/2020 |
| CVE-2020-26134 | MEDIUM6.1 | Live Helper Chat before 3.44v allows stored XSS in chat messages with an operator via BBCode. | 02/10/2020 |