PT-2022-13298 · Remdex · Livehelperchat

Name of the Vulnerable Software and Affected Versions: remdex/livehelperchat versions prior to 3.93v Description: The issue is related to Cross-site Scripting XSS - Stored. This means an attacker can inject malicious scripts into the application, which are then stored and executed by the...

Cross-site Scripting (XSS) - Stored in livehelperchat/livehelperchat

Description LiveHelperChat is vulnerable to Stored XSS at the Company name field customercompanynameValueParam parameter in the Copyright settings tab of the Chat configuration page. Payload constructor.constructor'alert1' Steps to reproduce 1.Login then go to Chat configuration page...

livehelperchat cross-site scripting vulnerability (CNVD-2022-09132)

livehelperchat is available through live helper chat and can be used to provide live support on the website for free. A cross-site scripting vulnerability exists in livehelperchat, which stems from a cross-site scripting vulnerability in Packagist remdex/livehelperchat. No detailed vulnerability...

Cross-site Scripting in LiveHelperChat

LiveHelperChat prior to version 3.93 is vulnerable to cross-site scripting...

GHSA-57QF-82HH-2HMC Cross-site Scripting in LiveHelperChat

LiveHelperChat prior to version 3.93 is vulnerable to cross-site scripting...

CVE-2022-0502

Cross-site Scripting XSS - Stored in Packagist remdex/livehelperchat prior to 3.93v...

CVE-2022-0502

Cross-site Scripting XSS - Stored in Packagist remdex/livehelperchat prior to 3.93v...

Cross site scripting

Cross-site Scripting XSS - Stored in Packagist remdex/livehelperchat prior to 3.93v...

CVE-2022-0502 Cross-site Scripting (XSS) - Stored in livehelperchat/livehelperchat

Cross-site Scripting XSS - Stored in Packagist remdex/livehelperchat prior to 3.93v...

CVE-2022-0502 Cross-site Scripting (XSS) - Stored in livehelperchat/livehelperchat

Cross-site Scripting XSS - Stored in Packagist remdex/livehelperchat prior to 3.93v...

CVE-2022-0502

CVE-2022-0502 affects the LiveHelperChat package remdex/livehelperchat. Multiple connected sources confirm a stored Cross-site Scripting (XSS) vulnerability in this package prior to version 3.93. Root cause identified as XSS in the livehelperchat package stored in Packagist. Impact is user-visibl...

livehelperchat 跨站脚本漏洞

livehelperchat is available through live helper chat and can be used to provide live support on the website for free. A cross-site scripting vulnerability exists in livehelperchat, which stems from a cross-site scripting vulnerability in Packagist remdex/livehelperchat. No detailed vulnerability...

Cross-site Scripting (XSS) - Stored in livehelperchat/livehelperchat

Description LiveHelperChat is vulnerable to Stored XSS at the Message field in the Personal canned message tab of the User account page. Payload constructor.constructor'alert1' Steps to reproduce 1.Login then go to User account page https://demo.livehelperchat.com/siteadmin/user/account 2.Switch ...

GHSA-VWXP-9QMF-W299 Cross-site Scripting in LiveHelperChat

LiveHelperChat remdex/livehelperchat in Packagist has a stored Cross-site Scripting XSS vulnerability prior to version 3.93...

Cross-site Scripting in LiveHelperChat

LiveHelperChat remdex/livehelperchat in Packagist has a stored Cross-site Scripting XSS vulnerability prior to version 3.93...

Cross-site Scripting (XSS)

remdex/livehelperchat is vulnerable to stored cross-site scripting. The vulnerability exists due to improper sanitization of the name field in embedcode.tpl.php which allows an attacker to steal user cookies and execute arbitrary scripts...

Cross-site Scripting (XSS)

remdex/livehelperchat is vulnerable to cross-site scripting XSS attacks. Name and Surname fields in the user account page are not properly escaped allowing an authenticated attacker to insert arbitrary javascript to victim's browser...

GHSA-54QQ-9CHJ-RXHV Cross-site Scripting in LiveHelperChat

LiveHelperChat prior to version 3.93 contains a cross-site scripting vulnerability...

Cross-site Scripting in LiveHelperChat

LiveHelperChat prior to version 3.93 contains a cross-site scripting vulnerability...

Cross-site Scripting in livehelperchat

Stored XSS is found in SettingsLive help configurationDepartments-Departments groups-edit When a user creates a new webhook under the NAME field and puts a payload constructor.constructor'alert1', the input gets stored, at user edit groupname , the payload gets executed...