424 matches found
CVE-2021-4169
CVE-2021-4169 affects livehelperchat. The vulnerability is an Improper Neutralization of Input During Web Page Generation (XSS) in livehelperchat. Open sources describe reflected/DOM-based XSS vectors enabling injection via user input, with impact limited to client-side script execution and poten...
CVE-2021-4169 Cross-site Scripting (XSS) - Reflected in livehelperchat/livehelperchat
livehelperchat is vulnerable to Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting'...
PT-2021-23376 · Unknown · Livehelperchat
Name of the Vulnerable Software and Affected Versions: livehelperchat affected versions not specified Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting. This means that the software does not properly neutralize use...
Cross-site Scripting (XSS) - Reflected in livehelperchat/livehelperchat
Description The htmlspecialchars function does not escape special characters like single quote, and the $prefix parameter can lead to reflected XSS Proof of Concept https://demo.livehelperchat.com/siteadmin/user/avatarbuilder/1?=1640314779051&prefix=123%27;;%20alert%27xss%27;// Impact XSS can hav...
livehelperchat cross-site request forgery vulnerability (CNVD-2022-01694)
livehelperchat is available through live helper chat and can be used to provide live support on the website for free. A cross-site request forgery vulnerability exists in livehelperchat, and no detailed vulnerability details are provided at this time...
livehelperchat cross-site scripting vulnerability (CNVD-2022-01692)
livehelperchat is available through live helper chat and can be used to provide live support on the website for free. A cross-site scripting vulnerability exists in livehelperchat that stems from livehelperchat's susceptibility to input mismatches during web page generation "cross-site scripting"...
Cross-Site Scripting (XSS)
remdex/livehelperchat is vulnerable to cross-site scripting. The vulnerability exists due to lack of sanitization of user input in user profile setting which allows an attacker to inject malicious scripts during Web Page Generation...
Cross-Site Request Forgery (CSRF)
remdex/livehelperchat is vulnerable to Cross-Site Request Forgery CSRF. A remote attacker is able to trick admin user to clear the system cache which allows an attacker to execute the lead action without CSRF token check...
CVE-2021-4131
livehelperchat is vulnerable to Cross-Site Request Forgery CSRF...
CVE-2021-4131
livehelperchat is vulnerable to Cross-Site Request Forgery CSRF...
CVE-2021-4131
livehelperchat is vulnerable to Cross-Site Request Forgery CSRF...
Cross site request forgery (csrf)
livehelperchat is vulnerable to Cross-Site Request Forgery CSRF...
CVE-2021-4131 Cross-Site Request Forgery (CSRF) in livehelperchat/livehelperchat
livehelperchat is vulnerable to Cross-Site Request Forgery CSRF...
CVE-2021-4131
CVE-2021-4131 affects livehelperchat and describes a Cross-Site Request Forgery (CSRF) vulnerability. The incident is corroborated by multiple sources in the connected documents, which list CSRF as the vulnerability class for livehelperchat and provide CVSS metrics: CVSS v3.1 base score 8.8 (vect...
PT-2021-23264 · Unknown · Livehelperchat
Name of the Vulnerable Software and Affected Versions: livehelperchat affected versions not specified Description: The issue is related to Cross-Site Request Forgery CSRF, which is a type of attack that tricks a user into performing unintended actions on a web application. No information is...
livehelperchat is vulnerable to Cross-Site Request Forgery (CSRF)
livehelperchat is vulnerable to Cross-Site Request Forgery CSRF...
GHSA-RPG7-Q4CV-P466 livehelperchat is vulnerable to Cross-Site Request Forgery (CSRF)
livehelperchat is vulnerable to Cross-Site Request Forgery CSRF...
CVE-2021-4132
livehelperchat is vulnerable to Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting'...