Lucene search
K

418 matches found

NVD
NVD
added 2022/04/29 9:15 a.m.11 views

CVE-2022-1530

Cross-site Scripting XSS in GitHub repository livehelperchat/livehelperchat prior to 3.99v. The attacker can execute malicious JavaScript on the application...

6.1CVSS0.00219EPSS
Exploits1References2
ATTACKERKB
ATTACKERKB
added 2022/04/29 9:15 a.m.2 views

CVE-2022-1530

Cross-site Scripting XSS in GitHub repository livehelperchat/livehelperchat prior to 3.99v. The attacker can execute malicious JavaScript on the application...

6.1CVSS5.6AI score0.00219EPSS
Exploits1References3
Prion
Prion
added 2022/04/29 9:15 a.m.11 views

Cross site scripting

Cross-site Scripting XSS in GitHub repository livehelperchat/livehelperchat prior to 3.99v. The attacker can execute malicious JavaScript on the application...

4.3CVSS6AI score0.00219EPSS
Exploits1References2Affected Software1
CVE
CVE
added 2022/04/29 8:50 a.m.104 views

CVE-2022-1530

CVE-2022-1530 corresponds to a Cross-site Scripting (XSS) vulnerability in livehelperchat/livehelperchat (GitHub repository) prior to version 3.99. The issue allows an attacker to execute malicious JavaScript within the application. Available sources indicate the vulnerability affects versions be...

6.1CVSS5AI score0.00219EPSS
Exploits1References2Affected Software1
Cvelist
Cvelist
added 2022/04/29 8:50 a.m.12 views

CVE-2022-1530 Cross-site Scripting (XSS) in livehelperchat/livehelperchat

Cross-site Scripting XSS in GitHub repository livehelperchat/livehelperchat prior to 3.99v. The attacker can execute malicious JavaScript on the application...

3.8CVSS6.2AI score0.00219EPSS
Exploits1References2
OSV
OSV
added 2022/04/29 8:50 a.m.7 views

CVE-2022-1530 Cross-site Scripting (XSS) in livehelperchat/livehelperchat

Cross-site Scripting XSS in GitHub repository livehelperchat/livehelperchat prior to 3.99v. The attacker can execute malicious JavaScript on the application...

3.8CVSS4.4AI score0.00219EPSS
Exploits1References4
Positive Technologies
Positive Technologies
added 2022/04/29 12:0 a.m.1 views

PT-2022-13933 · Unknown · Livehelperchat

Name of the Vulnerable Software and Affected Versions: livehelperchat/livehelperchat versions prior to 3.99v Description: The issue is related to Cross-site Scripting XSS, which allows an attacker to execute malicious JavaScript on the application. This can potentially lead to unauthorized action...

6.1CVSS4.2AI score0.00219EPSS
Exploits1References8
CNNVD
CNNVD
added 2022/04/29 12:0 a.m.1 views

livehelperchat 跨站脚本漏洞

livehelperchat is an open source application that provides free live support on a website through live helper chat. A cross-site scripting XSS vulnerability exists in livehelperchat versions prior to 3.99, which can be exploited by an attacker to execute malicious JS scripts on the application...

6.1CVSS5.4AI score0.00219EPSS
Exploits1References3
CNVD
CNVD
added 2022/04/11 12:0 a.m.21 views

An unspecified vulnerability exists in livehelperchat (CNVD-2022-55057)

livehelperchat is available via Live Assistant Chat, which provides free live support on the website. livehelperchat versions prior to 3.97 have a security vulnerability that could be exploited by attackers to generate a fake password reset link to steal a password reset token, which could lead t...

8.8CVSS3.6AI score0.00397EPSS
Exploits1References1
Veracode
Veracode
added 2022/04/08 7:54 a.m.19 views

Host Header Injection

remdex/livehelperchat is vulnerable to host header injection. The library does not properly validate the URL for password reset which allows a malicious attacker to generate a fake password link and take over the user account...

8.8CVSS2.6AI score0.00397EPSS
Exploits1References4Affected Software1
CNVD
CNVD
added 2022/04/08 12:0 a.m.13 views

livehelperchat Cross-Site Scripting Vulnerability (CNVD-2022-71405)

livehelperchat is available via livehelperchat, which provides free live support on the website. livehelperchat versions prior to 3.97 are vulnerable to a cross-site scripting vulnerability that originates in the GitHub repository livehelperchat/livehelperchat in livehelperchat An XSS vulnerabili...

8.8CVSS1.1AI score0.00122EPSS
Exploits1References1
ATTACKERKB
ATTACKERKB
added 2022/04/07 7:15 p.m.2 views

CVE-2022-0935

Host Header injection in password Reset in GitHub repository livehelperchat/livehelperchat prior to 3.97...

8.8CVSS7.6AI score0.00397EPSS
Exploits1References3
NVD
NVD
added 2022/04/07 7:15 p.m.10 views

CVE-2022-0935

Host Header injection in password Reset in GitHub repository livehelperchat/livehelperchat prior to 3.97...

8.8CVSS0.00397EPSS
Exploits1References2
Prion
Prion
added 2022/04/07 7:15 p.m.15 views

Design/Logic Flaw

Host Header injection in password Reset in GitHub repository livehelperchat/livehelperchat prior to 3.97...

6.8CVSS9AI score0.00397EPSS
Exploits1References2Affected Software1
CVE
CVE
added 2022/04/07 6:21 p.m.77 views

CVE-2022-0935

CVE-2022-0935 affects livehelperchat/livehelperchat prior to 3.97 and is caused by Host Header injection in the password reset flow. Multiple sources (NVD, Red Hat, OSV, CNVD, PT-Security, CNVD) describe an attacker abusing header handling to forge or manipulate password reset tokens, potentially...

8.8CVSS9AI score0.00397EPSS
Exploits1References2Affected Software1
OSV
OSV
added 2022/04/07 6:21 p.m.15 views

CVE-2022-0935 Host Header injection in password Reset in livehelperchat/livehelperchat

Host Header injection in password Reset in GitHub repository livehelperchat/livehelperchat prior to 3.97...

8.8CVSS9.1AI score0.00397EPSS
Exploits1References4
Cvelist
Cvelist
added 2022/04/07 6:21 p.m.12 views

CVE-2022-0935 Host Header injection in password Reset in livehelperchat/livehelperchat

Host Header injection in password Reset in GitHub repository livehelperchat/livehelperchat prior to 3.97...

8.8CVSS9.2AI score0.00397EPSS
Exploits1References2
CNNVD
CNNVD
added 2022/04/07 12:0 a.m.1 views

livehelperchat 安全漏洞

livehelperchat is available via Live Assistant Chat, which provides free live support on the website. livehelperchat versions prior to 3.97 have a security vulnerability that could be exploited by attackers to generate a fake password reset link to steal a password reset token, which could lead t...

8.8CVSS5.7AI score0.00397EPSS
Exploits1References3
Positive Technologies
Positive Technologies
added 2022/04/07 12:0 a.m.3 views

PT-2022-13536 · Unknown · Livehelperchat

Name of the Vulnerable Software and Affected Versions: livehelperchat/livehelperchat versions prior to 3.97 Description: The issue concerns a Host Header injection in the password reset functionality. This problem is associated with the GitHub repository livehelperchat/livehelperchat...

8.8CVSS8.9AI score0.00397EPSS
Exploits1References6
NVD
NVD
added 2022/04/06 4:15 a.m.7 views

CVE-2022-1234

XSS in livehelperchat in GitHub repository livehelperchat/livehelperchat prior to 3.97. This vulnerability has the potential to deface websites, result in compromised user accounts, and can run malicious code on web pages, which can lead to a compromise of the user’s device...

8.8CVSS0.00122EPSS
Exploits1References2
Rows per page
Query Builder