85 matches found
livehelperchat 跨站脚本漏洞
livehelperchat is a chat via a live helper that provides free live support on a website. A cross-site scripting vulnerability exists in livehelperchat that stems from the presence of xss in Packagist remdex livehelperchat prior to 3.93v. An attacker could exploit this vulnerability to execute...
CVE-2022-0375
Cross-site Scripting XSS - Stored in Packagist remdex/livehelperchat prior to 3.93v...
CVE-2022-0375
Cross-site Scripting XSS - Stored in Packagist remdex/livehelperchat prior to 3.93v...
CVE-2022-0374
Cross-site Scripting XSS - Stored in Packagist remdex/livehelperchat prior to 3.93v...
CVE-2022-0374
Cross-site Scripting XSS - Stored in Packagist remdex/livehelperchat prior to 3.93v...
Cross site scripting
Cross-site Scripting XSS - Stored in Packagist remdex/livehelperchat prior to 3.93v...
CVE-2022-0375
CVE-2022-0375 is a Stored XSS vulnerability in LiveHelperChat (Packagist remdex/livehelperchat) prior to 3.93, affecting the Name field in Admin themes under System configuration. The root cause is stored XSS that can deface sites or compromise user sessions when an attacker injects malicious pay...
CVE-2022-0375 Cross-site Scripting (XSS) - Stored in livehelperchat/livehelperchat
Cross-site Scripting XSS - Stored in Packagist remdex/livehelperchat prior to 3.93v...
CVE-2022-0375 Cross-site Scripting (XSS) - Stored in livehelperchat/livehelperchat
Cross-site Scripting XSS - Stored in Packagist remdex/livehelperchat prior to 3.93v...
CVE-2022-0374 Cross-site Scripting (XSS) - Stored in livehelperchat/livehelperchat
Cross-site Scripting XSS - Stored in Packagist remdex/livehelperchat prior to 3.93v...
CVE-2022-0374 Cross-site Scripting (XSS) - Stored in livehelperchat/livehelperchat
Cross-site Scripting XSS - Stored in Packagist remdex/livehelperchat prior to 3.93v...
CVE-2022-0374
CVE-2022-0374 corresponds to a Stored XSS in livehelperchat (Packagist remdex/livehelperchat) prior to version 3.93. The vulnerability arises from unsanitized user-supplied input that can be stored and later rendered, enabling script execution. Multiple connected records (OSV, NVD, CNVD, huntr, e...
livehelperchat 跨站脚本漏洞
livehelperchat is a chat via a live helper that provides free live support on a website. A cross-site scripting vulnerability exists in livehelperchat, which stems from a lack of proper validation of client data by the WEB application in Packagist remdex/livehelperchat in 3.93. An attacker can...
GHSA-C7FM-JX59-WJF6 Authorization Bypass Through User-Controlled Key in LiveHelperChat
Authorization Bypass Through User-Controlled Key in Packagist remdex/livehelperchat prior to 3.92v...
Cross-Site Request Forgery (CSRF)
remdex/livehelperchat is vulnerable to cross-site request forgery. The library does not properly validate the CSRF tokens in CannedMessage requests, allowing an attacker to create arbitrary canned messages, modify notification settings and group chat options...
CVE-2022-0266
Authorization Bypass Through User-Controlled Key in Packagist remdex/livehelperchat prior to 3.92v...
Authorization
Authorization Bypass Through User-Controlled Key in Packagist remdex/livehelperchat prior to 3.92v...
CVE-2022-0266
CVE-2022-0266 affects livehelperchat (Packagist remdex/livehelperchat) prior to version 3.92. The vulnerability is described as an authorization bypass via a user-controlled key. Multiple connected sources (OSV, CNVD/CNNVD, NVD, CVE lists) consistently reference the same issue and suggest upgradi...