6 matches found
CVE-2025-51403
エクスプロイトタイトル: LiveHelperChat =4.61 - 部門割り当てのAlias Nickフィールドを介した保存型クロスサイトスクリプティング XSS 日付: 09/06/2025 エクスプロイト作者: Manojkumar J TheWhiteEvil LinkedIn: https://www.linkedin.com/in/manojkumar-j-7ba35b202/ ベンダーホームページ: https://github.com/LiveHelperChat/livehelperchat/ ソフトウェアリンク:...
EUVD-2025-22260
Malicious code in bioql PyPI...
LiveHelperChat 4.61 - Stored Cross Site Scripting (XSS) via Department Assignment Alias Nick Field
Exploit Title: LiveHelperChat 4. Save the changes. 5. Revist the Department Assignment settings page and edit the Alias Nick field, the cross site scripting xss will execute...
CVE-2025-51403: Improper Neutralization of Input During Web Page Generation
A stored cross-site scripting XSS vulnerability in the department assignment editing module of of Live Helper Chat v4.60 allows attackers to execute arbitrary web scripts or HTML via injecting a crafted payload into the Alias Nick parameter...
PT-2025-30334 · Unknown · Livehelperchat
Name of the Vulnerable Software and Affected Versions: Live Helper Chat version 4.60 Description: A stored cross-site scripting XSS issue exists in the department assignment editing module. Attackers can execute arbitrary web scripts or HTML by injecting a crafted payload into the Alias Nick...