Lucene search
K

418 matches found

Veracode
Veracode
added 2021/12/20 4:18 a.m.13 views

Cross-Site Scripting (XSS)

remdex/livehelperchat is vulnerable to cross-site scripting. The vulnerability exists due to lack of sanitization of user input in user profile setting which allows an attacker to inject malicious scripts during Web Page Generation...

5.4CVSS2.4AI score0.00186EPSS
Exploits1References3Affected Software1
Veracode
Veracode
added 2021/12/20 4:8 a.m.15 views

Cross-Site Request Forgery (CSRF)

remdex/livehelperchat is vulnerable to Cross-Site Request Forgery CSRF. A remote attacker is able to trick admin user to clear the system cache which allows an attacker to execute the lead action without CSRF token check...

8.8CVSS4.3AI score0.00144EPSS
Exploits1References3Affected Software1
ATTACKERKB
ATTACKERKB
added 2021/12/18 7:15 a.m.4 views

CVE-2021-4131

livehelperchat is vulnerable to Cross-Site Request Forgery CSRF...

8.8CVSS6.8AI score0.00144EPSS
Exploits1References3
NVD
NVD
added 2021/12/18 7:15 a.m.6 views

CVE-2021-4131

livehelperchat is vulnerable to Cross-Site Request Forgery CSRF...

8.8CVSS0.00144EPSS
Exploits1References2
OSV
OSV
added 2021/12/18 7:15 a.m.9 views

CVE-2021-4131

livehelperchat is vulnerable to Cross-Site Request Forgery CSRF...

8.8CVSS6.9AI score
Exploits0References2
Prion
Prion
added 2021/12/18 7:15 a.m.8 views

Cross site request forgery (csrf)

livehelperchat is vulnerable to Cross-Site Request Forgery CSRF...

6.8CVSS8.8AI score0.00144EPSS
Exploits1References2Affected Software1
Cvelist
Cvelist
added 2021/12/18 6:20 a.m.11 views

CVE-2021-4131 Cross-Site Request Forgery (CSRF) in livehelperchat/livehelperchat

livehelperchat is vulnerable to Cross-Site Request Forgery CSRF...

6.5CVSS9AI score0.00144EPSS
Exploits1References2
CVE
CVE
added 2021/12/18 6:20 a.m.61 views

CVE-2021-4131

CVE-2021-4131 affects livehelperchat and describes a Cross-Site Request Forgery (CSRF) vulnerability. The incident is corroborated by multiple sources in the connected documents, which list CSRF as the vulnerability class for livehelperchat and provide CVSS metrics: CVSS v3.1 base score 8.8 (vect...

8.8CVSS7.5AI score0.00144EPSS
Exploits1References2Affected Software1
Positive Technologies
Positive Technologies
added 2021/12/18 12:0 a.m.1 views

PT-2021-23264 · Unknown · Livehelperchat

Name of the Vulnerable Software and Affected Versions: livehelperchat affected versions not specified Description: The issue is related to Cross-Site Request Forgery CSRF, which is a type of attack that tricks a user into performing unintended actions on a web application. No information is...

8.8CVSS6.5AI score0.00144EPSS
Exploits1References9
Github Security Blog
Github Security Blog
added 2021/12/17 8:0 p.m.17 views

livehelperchat is vulnerable to Cross-Site Request Forgery (CSRF)

livehelperchat is vulnerable to Cross-Site Request Forgery CSRF...

6.5CVSS2.6AI score0.00097EPSS
Exploits1References4Affected Software1
OSV
OSV
added 2021/12/17 8:0 p.m.13 views

GHSA-RPG7-Q4CV-P466 livehelperchat is vulnerable to Cross-Site Request Forgery (CSRF)

livehelperchat is vulnerable to Cross-Site Request Forgery CSRF...

6.5CVSS6.3AI score0.00097EPSS
Exploits1References4
OSV
OSV
added 2021/12/17 1:15 p.m.9 views

CVE-2021-4132

livehelperchat is vulnerable to Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting'...

5.4CVSS6.7AI score
Exploits0References2
ATTACKERKB
ATTACKERKB
added 2021/12/17 1:15 p.m.4 views

CVE-2021-4132

livehelperchat is vulnerable to Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting'...

7.3CVSS6.6AI score0.00186EPSS
Exploits1References3
NVD
NVD
added 2021/12/17 1:15 p.m.7 views

CVE-2021-4132

livehelperchat is vulnerable to Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting'...

7.3CVSS0.00186EPSS
Exploits1References2
Prion
Prion
added 2021/12/17 1:15 p.m.9 views

Cross site scripting

livehelperchat is vulnerable to Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting'...

3.5CVSS5.4AI score0.00186EPSS
Exploits1References2Affected Software1
CVE
CVE
added 2021/12/17 12:45 p.m.66 views

CVE-2021-4132

CVE-2021-4132 affects the LiveHelperChat project. The exposure is a Cross-site Scripting (XSS) flaw described as Improper Neutralization of Input During Web Page Generation, enabling stored XSS in the application. The most concrete details come from multiple connected sources: stored XSS in user ...

7.3CVSS5.6AI score0.00186EPSS
Exploits1References2Affected Software1
Cvelist
Cvelist
added 2021/12/17 12:45 p.m.12 views

CVE-2021-4132 Cross-site Scripting (XSS) - Stored in livehelperchat/livehelperchat

livehelperchat is vulnerable to Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting'...

7.3CVSS5.7AI score0.00186EPSS
Exploits1References2
Huntr
Huntr
added 2021/12/17 4:39 a.m.13 views

Cross-site Scripting (XSS) - Stored in livehelperchat/livehelperchat

Description livehelperchat is vulnerable to stored XSS in users profile setting where username, password, repeat password, nickname, name, surname, job title fields are vulnerable to stored XSS. Proof of Concept this.constructor.constructor'alert"foo"' Enter the given payload in the above-mention...

3.5CVSS1.1AI score0.00186EPSS
Exploits1
CNVD
CNVD
added 2021/12/17 12:0 a.m.10 views

livehelperchat Cross-Site Request Forgery Vulnerability (CNVD-2022-06911)

livehelperchat is available via Live Helper Chat, which provides free live support on the website. livehelperchat suffers from a cross-site request forgery vulnerability, which stems from the fact that livehelperchat is vulnerable to cross-site request forgery CSRF attacks. No details of the...

6.5CVSS3.2AI score0.00097EPSS
Exploits1References1
CNNVD
CNNVD
added 2021/12/17 12:0 a.m.1 views

livehelperchat 跨站脚本漏洞

livehelperchat is available through live helper chat and can be used to provide live support on the website for free. A cross-site scripting vulnerability exists in livehelperchat that stems from livehelperchat's susceptibility to input mismatches during web page generation "cross-site scripting"...

7.3CVSS5.4AI score0.00186EPSS
Exploits1References3
Rows per page
Query Builder