Lucene search
+L

7 matches found

RedhatCVE
RedhatCVE
•added 2025/07/23 12:57 a.m.•22 views

CVE-2025-51401

A stored cross-site scripting XSS vulnerability in the chat transfer function of Live Helper Chat v4.60 allows attackers to execute arbitrary web scripts or HTML via injecting a crafted payload into the operator name parameter...

5.4CVSS5.8AI score0.00923EPSS
SaveExploits4References1
Exploit DB
Exploit DB
•added 2025/07/22 12:00 a.m.•274 views

LiveHelperChat 4.61 - Stored Cross Site Scripting (XSS) via the Chat Transfer Function

Exploit Title: LiveHelperChat 4.61 - Stored Cross Site Scripting XSS via the Chat Transfer Function Date: 09/06/2025 Exploit Author: Manojkumar J TheWhiteEvil Linkedin: https://www.linkedin.com/in/manojkumar-j-7ba35b202/ Vendor Homepage: https://github.com/LiveHelperChat/livehelperchat/ Software...

5.2AI score0.00923EPSS
SaveExploits4
CNNVD
CNNVD
•added 2025/07/21 12:00 a.m.•11 views

live helper chat 安全漏洞

live helper chat is an open source plugin from an individual developer that supports online chat. It provides chat functionality for web platforms. A security vulnerability exists in live helper chat version v4.60, which stems from insufficient validation of the operator name parameter input in t...

5.4CVSS5.7AI score0.00923EPSS
SaveExploits4References5
Vulnrichment
Vulnrichment
•added 2025/07/21 12:00 a.m.•4 views

CVE-2025-51401

A stored cross-site scripting XSS vulnerability in the chat transfer function of Live Helper Chat v4.60 allows attackers to execute arbitrary web scripts or HTML via injecting a crafted payload into the operator name parameter...

5.3AI score0.00923EPSS
SaveExploits4References3
Cvelist
Cvelist
•added 2025/07/21 12:00 a.m.•27 views

CVE-2025-51401

A stored cross-site scripting XSS vulnerability in the chat transfer function of Live Helper Chat v4.60 allows attackers to execute arbitrary web scripts or HTML via injecting a crafted payload into the operator name parameter...

0.00923EPSS
SaveExploits4References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/07/21 12:00 a.m.•0 views

CVE-2025-51401: Improper Neutralization of Input During Web Page Generation

A stored cross-site scripting XSS vulnerability in the chat transfer function of Live Helper Chat v4.60 allows attackers to execute arbitrary web scripts or HTML via injecting a crafted payload into the operator name parameter...

5.4CVSS6.1AI score0.00923EPSS
SaveExploits4References1
OSV
OSV
•added 2025/07/21 12:00 a.m.•13 views

CVE-2025-51401

A stored cross-site scripting XSS vulnerability in the chat transfer function of Live Helper Chat v4.60 allows attackers to execute arbitrary web scripts or HTML via injecting a crafted payload into the operator name parameter...

5.4CVSS5.2AI score
SaveExploits0References5
Rows per page
Query Builder