Lucene search
+L

424 matches found

Github Security Blog
Github Security Blog
added 2022/01/28 11:06 p.m.54 views

Cross-site Scripting in livehelperchat

Stored XSS is found in SettingsLive help configurationPersonal Themestatic content. Under the NAME field put a payload constructor.constructor'alert1' while creating content, and you will see that the input gets stored, and every time the user visits, the payload gets executed...

7.1CVSS1.1AI score0.00766EPSS
SaveExploits1References4Affected Software1
OSV
OSV
added 2022/01/28 11:06 p.m.69 views

GHSA-8WCC-F2VQ-H4GX Cross-site Scripting in livehelperchat

Stored XSS is found in SettingsLive help configurationPersonal Themestatic content. Under the NAME field put a payload constructor.constructor'alert1' while creating content, and you will see that the input gets stored, and every time the user visits, the payload gets executed...

5.4CVSS5.1AI score0.00766EPSS
SaveExploits1References4
OSV
OSV
added 2022/01/28 11:06 p.m.28 views

GHSA-59QH-G7M4-J9M9 Cross-site Scripting in livehelperchat

Stored XSS attacks exist in new the form creation flow. New forms can be given a title which will render javascript...

6.5CVSS5.1AI score0.00687EPSS
SaveExploits1References4
Github Security Blog
Github Security Blog
added 2022/01/28 11:06 p.m.51 views

Cross-site Scripting in livehelperchat

Stored XSS attacks exist in new the form creation flow. New forms can be given a title which will render javascript...

6.5CVSS1.6AI score0.00687EPSS
SaveExploits1References4Affected Software1
OSV
OSV
added 2022/01/28 11:06 p.m.77 views

GHSA-X3G3-JH26-76CF Cross-site Scripting in livehelperchat

LiveHelperChat is vulnerable to Stored XSS at the Name field in the Admin themes of System configuration...

6.5CVSS4.7AI score0.007EPSS
SaveExploits1References4
Github Security Blog
Github Security Blog
added 2022/01/28 11:06 p.m.40 views

Cross-site Scripting in livehelperchat

LiveHelperChat is vulnerable to Stored XSS at the Name field in the Admin themes of System configuration...

6.5CVSS1.6AI score0.007EPSS
SaveExploits1References4Affected Software1
ATTACKERKB
ATTACKERKB
added 2022/01/28 10:15 p.m.11 views

CVE-2022-0395

Cross-site Scripting XSS - Stored in Packagist remdex/livehelperchat prior to 3.93v...

6.5CVSS6.2AI score0.0064EPSS
SaveExploits1References3
NVD
NVD
added 2022/01/28 10:15 p.m.32 views

CVE-2022-0395

Cross-site Scripting XSS - Stored in Packagist remdex/livehelperchat prior to 3.93v...

6.5CVSS0.0064EPSS
SaveExploits1References2
OSV
OSV
added 2022/01/28 9:31 p.m.20 views

CVE-2022-0395 Cross-site Scripting (XSS) - Stored in livehelperchat/livehelperchat

Cross-site Scripting XSS - Stored in Packagist remdex/livehelperchat prior to 3.93v...

6.5CVSS6.2AI score
SaveExploits0References4
Cvelist
Cvelist
added 2022/01/28 9:31 p.m.40 views

CVE-2022-0395 Cross-site Scripting (XSS) - Stored in livehelperchat/livehelperchat

Cross-site Scripting XSS - Stored in Packagist remdex/livehelperchat prior to 3.93v...

6.5CVSS5.4AI score0.0064EPSS
SaveExploits1References2
CVE
CVE
added 2022/01/28 9:31 p.m.101 views

CVE-2022-0395

CVE-2022-0395 is a stored XSS vulnerability in LiveHelperChat (Packagist remdex/livehelperchat) before version 3.93. The issue affects the web application's handling of user-supplied input, enabling attacker-controlled scripts to run in a victim’s browser. Multiple sources (NVD entry, OSV/GHSA ad...

6.5CVSS5.3AI score0.0064EPSS
SaveExploits1References2Affected Software1
NVD
NVD
added 2022/01/28 11:15 a.m.38 views

CVE-2022-0394

Cross-site Scripting XSS - Stored in Packagist remdex/livehelperchat prior to 3.93v...

5.4CVSS0.00547EPSS
SaveExploits1References2
Prion
Prion
added 2022/01/28 11:15 a.m.14 views

Cross site scripting

Cross-site Scripting XSS - Stored in Packagist remdex/livehelperchat prior to 3.93v...

3.5CVSS5.2AI score0.00547EPSS
SaveExploits1References2Affected Software1
CVE
CVE
added 2022/01/28 10:16 a.m.98 views

CVE-2022-0394

The CVE-2022-0394 entry relates to a stored Cross-site Scripting (XSS) vulnerability in LiveHelperChat (Packagist remdex/livehelperchat). Affected versions are prior to 3.93. Root cause details are not explicitly stated beyond the stored XSS characterization, but multiple connected records confir...

5.4CVSS5AI score0.00547EPSS
SaveExploits1References2Affected Software1
OSV
OSV
added 2022/01/28 10:16 a.m.25 views

CVE-2022-0394 Cross-site Scripting (XSS) - Stored in livehelperchat/livehelperchat

Cross-site Scripting XSS - Stored in Packagist remdex/livehelperchat prior to 3.93v...

5.3CVSS5.5AI score
SaveExploits0References4
Cvelist
Cvelist
added 2022/01/28 10:16 a.m.46 views

CVE-2022-0394 Cross-site Scripting (XSS) - Stored in livehelperchat/livehelperchat

Cross-site Scripting XSS - Stored in Packagist remdex/livehelperchat prior to 3.93v...

5.3CVSS5.4AI score0.00547EPSS
SaveExploits1References2
Vulnrichment
Vulnrichment
added 2022/01/28 10:16 a.m.2 views

CVE-2022-0394 Cross-site Scripting (XSS) - Stored in livehelperchat/livehelperchat

Cross-site Scripting XSS - Stored in Packagist remdex/livehelperchat prior to 3.93v...

5.3CVSS5AI score0.00547EPSS
SaveExploits1References2
Positive Technologies
Positive Technologies
added 2022/01/28 12:00 a.m.7 views

PT-2022-13151 · Unknown · Livehelperchat

Name of the Vulnerable Software and Affected Versions: LiveHelperChat versions prior to 3.93 Description: The issue is a stored Cross-site Scripting XSS vulnerability. It allows attackers to inject malicious scripts into the application, potentially leading to unauthorized access or data theft. T...

5.4CVSS4.8AI score0.00547EPSS
SaveExploits1References9
CNNVD
CNNVD
added 2022/01/28 12:00 a.m.15 views

livehelperchat 跨站脚本漏洞

livehelperchat is a chat via a live helper that provides free live support on a website. A security vulnerability exists in livehelperchat that stems from the WEB application's lack of proper validation of client data. An attacker can exploit the vulnerability to execute client-side code...

5.4CVSS5.8AI score0.00547EPSS
SaveExploits1References3
Positive Technologies
Positive Technologies
added 2022/01/28 12:00 a.m.9 views

PT-2022-13152 · Unknown · Livehelperchat

Name of the Vulnerable Software and Affected Versions: LiveHelperChat versions prior to 3.93 Description: The issue is related to a Cross-site Scripting XSS - Stored vulnerability. This type of vulnerability allows an attacker to inject malicious scripts into a website, which can then be executed...

6.5CVSS5.5AI score0.0064EPSS
SaveExploits1References10
Rows per page
Query Builder