livehelperchat Cross-site Request Forgery Vulnerability (CNVD-2022-08039)

livehelperchat is available through Live Helper Chat, which provides free live support on the website. livehelperchat contains a cross-site request forgery vulnerability that stems from the WEB application not adequately verifying that the request is from a trusted user. An attacker could exploit the vulnerability to spoof malicious requests to trick victims into clicking to perform sensitive actions.