LiveHelperChat

Products

ProductCVEsExploitedLatest
livehelperchat/livehelperchat31–Apr 29, 2022
LiveHelperChat3–May 14, 2026
lhc-php-resque Extension1–Jul 11, 2025

Exploited and recent CVEs

  • CVE-2026-44633 High 8.1 Live Helper Chat: REST API chat update accepts arbitrary chat fields across department boundaries 0.3%
  • CVE-2026-27954 Medium 4.9 LiveHelperChat has department-level authorization bypass in holdaction, blockuser, and transferchat endpoints 0.2%
  • CVE-2026-0483 Medium 6.9 Stored Cross-Site Scripting (XSS) vulnerability in LiveHelperChat 0.3%
  • CVE-2025-7435 Low 3.5 LiveHelperChat lhc-php-resque Extension List list cross site scripting 0.3%
  • CVE-2022-1530 Low 3.8 Cross-site Scripting (XSS) in livehelperchat/livehelperchat 0.7%
  • CVE-2022-0935 High 8.8 Host Header injection in password Reset in livehelperchat/livehelperchat 1.3%
  • CVE-2022-1234 High 8.8 XSS in livehelperchat in livehelperchat/livehelperchat 0.7%
  • CVE-2022-1235 High 7.5 Weak secrethash can be brute-forced in livehelperchat/livehelperchat 0.6%
  • CVE-2022-1213 High 7.7 SSRF filter bypass port 80, 433 in livehelperchat/livehelperchat 0.6%
  • CVE-2022-1176 High 7.5 Loose comparison causes IDOR on multiple endpoints in livehelperchat/livehelperchat 1.2%
  • CVE-2022-1191 High 8.7 SSRF on index.php/cobrowse/proxycss/ in livehelperchat/livehelperchat 1.0%
  • CVE-2022-0612 Medium 6.7 Cross-site Scripting (XSS) - Stored in livehelperchat/livehelperchat 0.6%
  • CVE-2022-0502 Medium 6.5 Cross-site Scripting (XSS) - Stored in livehelperchat/livehelperchat 0.6%
  • CVE-2022-0395 Medium 6.5 Cross-site Scripting (XSS) - Stored in livehelperchat/livehelperchat 0.6%
  • CVE-2022-0394 Medium 5.3 Cross-site Scripting (XSS) - Stored in livehelperchat/livehelperchat 0.5%
  • CVE-2022-0370 High 7.1 Cross-site Scripting (XSS) - Stored in livehelperchat/livehelperchat 0.8%
  • CVE-2022-0387 Medium 6.3 Cross-site Scripting (XSS) - Stored in livehelperchat/livehelperchat 0.6%
  • CVE-2022-0375 Medium 6.5 Cross-site Scripting (XSS) - Stored in livehelperchat/livehelperchat 0.7%
  • CVE-2022-0374 Medium 6.5 Cross-site Scripting (XSS) - Stored in livehelperchat/livehelperchat 0.7%
  • CVE-2022-0266 Medium 6.5 Authorization Bypass Through User-Controlled Key in livehelperchat/livehelperchat 1.1%
  • CVE-2022-0245 Medium 5.7 Cross-Site Request Forgery (CSRF) in livehelperchat/livehelperchat 0.4%
  • CVE-2022-0253 High 7.1 Cross-site Scripting (XSS) - Stored in livehelperchat/livehelperchat 0.8%
  • CVE-2022-0226 Medium 4.3 Cross-Site Request Forgery (CSRF) in livehelperchat/livehelperchat 0.4%
  • CVE-2022-0231 Medium 5.7 Cross-Site Request Forgery (CSRF) in livehelperchat/livehelperchat 0.5%
  • CVE-2022-0083 High 7.3 Generation of Error Message Containing Sensitive Information in livehelperchat/livehelperchat 0.9%
  • CVE-2021-4175 Medium 6.6 Cross-site Scripting (XSS) - Stored in livehelperchat/livehelperchat 0.5%
  • CVE-2021-4176 Medium 5.4 Cross-site Scripting (XSS) - Reflected in livehelperchat/livehelperchat 0.8%
  • CVE-2021-4179 Medium 6.6 Cross-site Scripting (XSS) - Stored in livehelperchat/livehelperchat 0.5%
  • CVE-2021-4177 Medium 4.3 Generation of Error Message Containing Sensitive Information in livehelperchat/livehelperchat 1.0%
  • CVE-2021-4169 Medium 5.4 Cross-site Scripting (XSS) - Reflected in livehelperchat/livehelperchat 1.0%