CVE-2017-1000059

2017-07-1713:18:17

Google

osv.dev

6.6 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

48.8%

JSON

Live Helper Chat version 2.06v and older is vulnerable to Cross-Site Scripting in the HTTP Header handling resulting in the execution of any user provided Javascript code in the session of other users.

CPENameOperatorVersion
livehelperchateq1.85
livehelperchateq1.91
livehelperchateq2.06
livehelperchateq1.88
livehelperchateq1.89
livehelperchateq1.93
livehelperchateq2.0
livehelperchateq1.90
livehelperchateq1.98
livehelperchateq1.94

Name	Operator	Version
livehelperchat	eq	1.85
livehelperchat	eq	1.91
livehelperchat	eq	2.06
livehelperchat	eq	1.88
livehelperchat	eq	1.89
livehelperchat	eq	1.93
livehelperchat	eq	2.0
livehelperchat	eq	1.90
livehelperchat	eq	1.98
livehelperchat	eq	1.94