CVE search
Every published CVE plus open-source advisories (NVD, OSV, GitHub), with CVSS, EPSS and whether it is being exploited in the wild (CISA KEV). Updated every few hours. Our scans match these against the technologies they detect.
Every published CVE plus open-source advisories (NVD, OSV, GitHub), with CVSS, EPSS and whether it is being exploited in the wild (CISA KEV). Updated every few hours. Our scans match these against the technologies they detect.
| 04/01/2022 |
| CVE-2021-4176 | 보통6.1 | livehelperchat is vulnerable to Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') | 29/12/2021 |
| CVE-2021-4175 | 보통5.4 | livehelperchat is vulnerable to Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') | 29/12/2021 |
| CVE-2021-4179 | 보통5.4 | livehelperchat is vulnerable to Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') | 28/12/2021 |
| CVE-2021-4177 | 보통5.3 | livehelperchat is vulnerable to Generation of Error Message Containing Sensitive Information | 28/12/2021 |
| CVE-2021-4169 | 보통6.1 | livehelperchat is vulnerable to Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') | 26/12/2021 |
| CVE-2021-4131 | 높음8.8 | livehelperchat is vulnerable to Cross-Site Request Forgery (CSRF) | 18/12/2021 |
| CVE-2021-4132 | 보통5.4 | livehelperchat is vulnerable to Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') | 17/12/2021 |
| CVE-2021-4123 | 보통6.5 | livehelperchat is vulnerable to Cross-Site Request Forgery (CSRF) | 16/12/2021 |
| CVE-2021-4049 | 보통6.5 | livehelperchat is vulnerable to Cross-Site Request Forgery (CSRF) | 07/12/2021 |
| CVE-2020-26135 | 보통6.1 | Live Helper Chat before 3.44v allows reflected XSS via the setsettingajax PATH_INFO. | 02/10/2020 |
| CVE-2020-26134 | 보통6.1 | Live Helper Chat before 3.44v allows stored XSS in chat messages with an operator via BBCode. | 02/10/2020 |
| CVE-2017-1000059 | 보통6.1 | Live Helper Chat version 2.06v and older is vulnerable to Cross-Site Scripting in the HTTP Header handling resulting in the execution of any user provided Javascript code in the session of other users. | 17/07/2017 |