CVE-2025-51396

CVE-2025-51396 concerns a stored XSS in Live Helper Chat (LHChat) versions up to 4.60/4.61. The vulnerability arises from insufficient validation of the Telegram Bot Username parameter, allowing an attacker to inject and store a payload that can execute scripts when admins view or edit the Telegr...

CVE-2025-51396

creationtimestamp| type| source ---|---|--- 2025-07-20 15:00:06+00:00| published-proof-of-concept| Telegram/V7wzcX4F-MozNLAT7FWP3rKubob7JBXGvac2G5pFurlt0fY 2025-07-25 12:18:43+00:00| seen| https://bsky.app/profile/undercode.bsky.social/post/3lurzspciwo2y...