| CVE-2024-27516 | 緊急9.8 | Server-Side Template Injection (SSTI) vulnerability in livehelperchat before 4.34v, allows remote attackers to execute arbitrary code and obtain sensitive information via the search parameter in lhc_web/modules/lhfaq/faqweight.php. | 29/02/2024 |
| CVE-2022-1530 | 中6.1 | Cross-site Scripting (XSS) in GitHub repository livehelperchat/livehelperchat prior to 3.99v. The attacker can execute malicious JavaScript on the application. | 29/04/2022 |
| CVE-2022-1235 | 高8.2 | Weak secrethash can be brute-forced in GitHub repository livehelperchat/livehelperchat prior to 3.96. | 05/04/2022 |
| CVE-2022-1213 | 高8.1 | SSRF filter bypass port 80, 433 in GitHub repository livehelperchat/livehelperchat prior to 3.67v. An attacker could make the application perform arbitrary requests, bypass CVE-2022-1191 | 05/04/2022 |
| CVE-2022-1176 | 高7.5 | Loose comparison causes IDOR on multiple endpoints in GitHub repository livehelperchat/livehelperchat prior to 3.96. | 31/03/2022 |
| CVE-2022-0612 | 中5.4 | Cross-site Scripting (XSS) - Stored in Packagist remdex/livehelperchat prior to 3.93v. | 16/02/2022 |
| CVE-2022-0502 | 中5.4 | Cross-site Scripting (XSS) - Stored in Packagist remdex/livehelperchat prior to 3.93v. | 06/02/2022 |
| CVE-2022-0395 | 中5.4 | Cross-site Scripting (XSS) - Stored in Packagist remdex/livehelperchat prior to 3.93v. | 28/01/2022 |
| CVE-2022-0394 | 中5.4 | Cross-site Scripting (XSS) - Stored in Packagist remdex/livehelperchat prior to 3.93v. | 28/01/2022 |
| CVE-2022-0387 | 中5.4 | Cross-site Scripting (XSS) - Stored in Packagist remdex/livehelperchat prior to 3.93v. | 27/01/2022 |
| CVE-2022-0370 | 中5.4 | Cross-site Scripting (XSS) - Stored in Packagist remdex/livehelperchat prior to 3.93v. | 27/01/2022 |
| CVE-2022-0375 | 中4.8 | Cross-site Scripting (XSS) - Stored in Packagist remdex/livehelperchat prior to 3.93v. | 26/01/2022 |
| CVE-2022-0374 | 中5.4 | Cross-site Scripting (XSS) - Stored in Packagist remdex/livehelperchat prior to 3.93v. | 26/01/2022 |
| CVE-2022-0266 | 中6.6 | Authorization Bypass Through User-Controlled Key in Packagist remdex/livehelperchat prior to 3.92v. | 19/01/2022 |
| CVE-2022-0253 | 中5.4 | livehelperchat is vulnerable to Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') | 17/01/2022 |
| CVE-2022-0226 | 中4.3 | livehelperchat is vulnerable to Cross-Site Request Forgery (CSRF) | 14/01/2022 |
| CVE-2022-0231 | 中6.5 | livehelperchat is vulnerable to Cross-Site Request Forgery (CSRF) | 14/01/2022 |
| CVE-2022-0083 | 中5.3 | livehelperchat is vulnerable to Generation of Error Message Containing Sensitive Information | 04/01/2022 |
| CVE-2021-4131 | 高8.8 | livehelperchat is vulnerable to Cross-Site Request Forgery (CSRF) | 18/12/2021 |
| CVE-2021-4132 | 中5.4 | livehelperchat is vulnerable to Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') | 17/12/2021 |