Lucene search
K

418 matches found

NVD
NVD
added 2022/02/06 11:15 a.m.7 views

CVE-2022-0502

Cross-site Scripting XSS - Stored in Packagist remdex/livehelperchat prior to 3.93v...

6.5CVSS0.00376EPSS
Exploits1References2
Prion
Prion
added 2022/02/06 11:15 a.m.6 views

Cross site scripting

Cross-site Scripting XSS - Stored in Packagist remdex/livehelperchat prior to 3.93v...

3.5CVSS5.2AI score0.00376EPSS
Exploits1References2Affected Software1
Cvelist
Cvelist
added 2022/02/06 10:50 a.m.12 views

CVE-2022-0502 Cross-site Scripting (XSS) - Stored in livehelperchat/livehelperchat

Cross-site Scripting XSS - Stored in Packagist remdex/livehelperchat prior to 3.93v...

6.5CVSS5.4AI score0.00376EPSS
Exploits1References2
CVE
CVE
added 2022/02/06 10:50 a.m.66 views

CVE-2022-0502

CVE-2022-0502 affects the LiveHelperChat package remdex/livehelperchat. Multiple connected sources confirm a stored Cross-site Scripting (XSS) vulnerability in this package prior to version 3.93. Root cause identified as XSS in the livehelperchat package stored in Packagist. Impact is user-visibl...

6.5CVSS5.3AI score0.00376EPSS
Exploits1References2Affected Software1
OSV
OSV
added 2022/02/06 10:50 a.m.13 views

CVE-2022-0502 Cross-site Scripting (XSS) - Stored in livehelperchat/livehelperchat

Cross-site Scripting XSS - Stored in Packagist remdex/livehelperchat prior to 3.93v...

6.5CVSS6.2AI score0.00376EPSS
Exploits1References4
CNNVD
CNNVD
added 2022/02/06 12:0 a.m.2 views

livehelperchat 跨站脚本漏洞

livehelperchat is available through live helper chat and can be used to provide live support on the website for free. A cross-site scripting vulnerability exists in livehelperchat, which stems from a cross-site scripting vulnerability in Packagist remdex/livehelperchat. No detailed vulnerability...

6.5CVSS5.2AI score0.00376EPSS
Exploits1References3
Huntr
Huntr
added 2022/02/05 9:39 a.m.14 views

Cross-site Scripting (XSS) - Stored in livehelperchat/livehelperchat

Description LiveHelperChat is vulnerable to Stored XSS at the Message field in the Personal canned message tab of the User account page. Payload constructor.constructor'alert1' Steps to reproduce 1.Login then go to User account page https://demo.livehelperchat.com/siteadmin/user/account 2.Switch ...

3.5CVSS5.4AI score0.00376EPSS
Exploits1
Github Security Blog
Github Security Blog
added 2022/02/01 12:49 a.m.30 views

Cross-site Scripting in LiveHelperChat

LiveHelperChat remdex/livehelperchat in Packagist has a stored Cross-site Scripting XSS vulnerability prior to version 3.93...

5.4CVSS1.7AI score0.00261EPSS
Exploits1References4Affected Software1
OSV
OSV
added 2022/02/01 12:49 a.m.20 views

GHSA-VWXP-9QMF-W299 Cross-site Scripting in LiveHelperChat

LiveHelperChat remdex/livehelperchat in Packagist has a stored Cross-site Scripting XSS vulnerability prior to version 3.93...

5.4CVSS5.1AI score0.00261EPSS
Exploits1References4
Veracode
Veracode
added 2022/01/31 2:15 p.m.16 views

Cross-site Scripting (XSS)

remdex/livehelperchat is vulnerable to stored cross-site scripting. The vulnerability exists due to improper sanitization of the name field in embedcode.tpl.php which allows an attacker to steal user cookies and execute arbitrary scripts...

5.4CVSS3AI score0.00261EPSS
Exploits1References3Affected Software1
Veracode
Veracode
added 2022/01/31 6:21 a.m.15 views

Cross-site Scripting (XSS)

remdex/livehelperchat is vulnerable to cross-site scripting XSS attacks. Name and Surname fields in the user account page are not properly escaped allowing an authenticated attacker to insert arbitrary javascript to victim's browser...

5.4CVSS2.8AI score0.00376EPSS
Exploits1References3Affected Software1
Github Security Blog
Github Security Blog
added 2022/01/29 12:0 a.m.18 views

Cross-site Scripting in LiveHelperChat

LiveHelperChat prior to version 3.93 contains a cross-site scripting vulnerability...

6.5CVSS1.7AI score0.00376EPSS
Exploits1References4Affected Software1
OSV
OSV
added 2022/01/29 12:0 a.m.14 views

GHSA-54QQ-9CHJ-RXHV Cross-site Scripting in LiveHelperChat

LiveHelperChat prior to version 3.93 contains a cross-site scripting vulnerability...

5.4CVSS5.1AI score0.00376EPSS
Exploits1References4
Github Security Blog
Github Security Blog
added 2022/01/28 11:6 p.m.33 views

Cross-site Scripting in livehelperchat

Stored XSS is found in SettingsLive help configurationDepartments-Departments groups-edit When a user creates a new webhook under the NAME field and puts a payload constructor.constructor'alert1', the input gets stored, at user edit groupname , the payload gets executed...

6.3CVSS0.00281EPSS
Exploits1References4Affected Software1
OSV
OSV
added 2022/01/28 11:6 p.m.17 views

GHSA-8WCC-F2VQ-H4GX Cross-site Scripting in livehelperchat

Stored XSS is found in SettingsLive help configurationPersonal Themestatic content. Under the NAME field put a payload constructor.constructor'alert1' while creating content, and you will see that the input gets stored, and every time the user visits, the payload gets executed...

5.4CVSS5.1AI score0.00289EPSS
Exploits1References4
Github Security Blog
Github Security Blog
added 2022/01/28 11:6 p.m.41 views

Cross-site Scripting in livehelperchat

Stored XSS is found in SettingsLive help configurationPersonal Themestatic content. Under the NAME field put a payload constructor.constructor'alert1' while creating content, and you will see that the input gets stored, and every time the user visits, the payload gets executed...

7.1CVSS1.1AI score0.00289EPSS
Exploits1References4Affected Software1
OSV
OSV
added 2022/01/28 11:6 p.m.17 views

GHSA-59QH-G7M4-J9M9 Cross-site Scripting in livehelperchat

Stored XSS attacks exist in new the form creation flow. New forms can be given a title which will render javascript...

6.5CVSS5.1AI score0.00267EPSS
Exploits1References4
Github Security Blog
Github Security Blog
added 2022/01/28 11:6 p.m.43 views

Cross-site Scripting in livehelperchat

Stored XSS attacks exist in new the form creation flow. New forms can be given a title which will render javascript...

6.5CVSS1.6AI score0.00267EPSS
Exploits1References4Affected Software1
OSV
OSV
added 2022/01/28 11:6 p.m.13 views

GHSA-X3G3-JH26-76CF Cross-site Scripting in livehelperchat

LiveHelperChat is vulnerable to Stored XSS at the Name field in the Admin themes of System configuration...

6.5CVSS4.7AI score0.00357EPSS
Exploits1References4
Github Security Blog
Github Security Blog
added 2022/01/28 11:6 p.m.32 views

Cross-site Scripting in livehelperchat

LiveHelperChat is vulnerable to Stored XSS at the Name field in the Admin themes of System configuration...

6.5CVSS1.6AI score0.00357EPSS
Exploits1References4Affected Software1
Rows per page
Query Builder