CVE-2022-0502

Cross-site Scripting XSS - Stored in Packagist remdex/livehelperchat prior to 3.93v...

CVE-2022-0375

Cross-site Scripting XSS - Stored in Packagist remdex/livehelperchat prior to 3.93v...

CVE-2022-0374

Cross-site Scripting XSS - Stored in Packagist remdex/livehelperchat prior to 3.93v...

EUVD-2022-0456

Malicious code in bioql PyPI...

EUVD-2022-0462

Malicious code in bioql PyPI...

EUVD-2022-0735

Malicious code in bioql PyPI...

EUVD-2022-0717

Malicious code in bioql PyPI...

EUVD-2022-1029

Malicious code in bioql PyPI...

EUVD-2022-1217

Malicious code in bioql PyPI...

CVE-2022-0395

Cross-site Scripting XSS - Stored in Packagist remdex/livehelperchat prior to 3.93v...

CVE-2022-0370

Cross-site Scripting XSS - Stored in Packagist remdex/livehelperchat prior to 3.93v...

BIT-LIVEHELPERCHAT-2022-0266

Authorization Bypass Through User-Controlled Key in Packagist remdex/livehelperchat prior to 3.92v...

BIT-LIVEHELPERCHAT-2022-0374

Cross-site Scripting XSS - Stored in Packagist remdex/livehelperchat prior to 3.93v...

BIT-LIVEHELPERCHAT-2022-0375

Cross-site Scripting XSS - Stored in Packagist remdex/livehelperchat prior to 3.93v...

BIT-LIVEHELPERCHAT-2022-0394

Cross-site Scripting XSS - Stored in Packagist remdex/livehelperchat prior to 3.93v...

BIT-LIVEHELPERCHAT-2022-0502

Cross-site Scripting XSS - Stored in Packagist remdex/livehelperchat prior to 3.93v...

Host Header Injection

remdex/livehelperchat is vulnerable to host header injection. The library does not properly validate the URL for password reset which allows a malicious attacker to generate a fake password link and take over the user account...

Cross-site Scripting (XSS)

remdex/livehelperchat is vulnerable to cross-site scripting. The library has stored XSS at customercompanynameValueParam field in the Chat configuration page allowing an attacker to inject and execute malicious javascript on user's browser, resulting in compromised user accounts...

CVE-2022-0612

Cross-site Scripting XSS - Stored in Packagist remdex/livehelperchat prior to 3.93v...

CVE-2022-0612

Cross-site Scripting XSS - Stored in Packagist remdex/livehelperchat prior to 3.93v...