LiveHelperChat
Products
| Product | CVEs | Exploited | Latest |
|---|---|---|---|
| livehelperchat/livehelperchat | 31 | – | Apr 29, 2022 |
| LiveHelperChat | 3 | – | May 14, 2026 |
| lhc-php-resque Extension | 1 | – | Jul 11, 2025 |
Exploited and recent CVEs
- CVE-2026-44633 Live Helper Chat: REST API chat update accepts arbitrary chat fields across department boundaries 0.3%
- CVE-2026-27954 LiveHelperChat has department-level authorization bypass in holdaction, blockuser, and transferchat endpoints 0.2%
- CVE-2026-0483 Stored Cross-Site Scripting (XSS) vulnerability in LiveHelperChat 0.3%
- CVE-2025-7435 LiveHelperChat lhc-php-resque Extension List list cross site scripting 0.3%
- CVE-2022-1530 Cross-site Scripting (XSS) in livehelperchat/livehelperchat 0.7%
- CVE-2022-0935 Host Header injection in password Reset in livehelperchat/livehelperchat 1.3%
- CVE-2022-1234 XSS in livehelperchat in livehelperchat/livehelperchat 0.7%
- CVE-2022-1235 Weak secrethash can be brute-forced in livehelperchat/livehelperchat 0.6%
- CVE-2022-1213 SSRF filter bypass port 80, 433 in livehelperchat/livehelperchat 0.6%
- CVE-2022-1176 Loose comparison causes IDOR on multiple endpoints in livehelperchat/livehelperchat 1.2%
- CVE-2022-1191 SSRF on index.php/cobrowse/proxycss/ in livehelperchat/livehelperchat 1.0%
- CVE-2022-0612 Cross-site Scripting (XSS) - Stored in livehelperchat/livehelperchat 0.6%
- CVE-2022-0502 Cross-site Scripting (XSS) - Stored in livehelperchat/livehelperchat 0.6%
- CVE-2022-0395 Cross-site Scripting (XSS) - Stored in livehelperchat/livehelperchat 0.6%
- CVE-2022-0394 Cross-site Scripting (XSS) - Stored in livehelperchat/livehelperchat 0.5%
- CVE-2022-0370 Cross-site Scripting (XSS) - Stored in livehelperchat/livehelperchat 0.8%
- CVE-2022-0387 Cross-site Scripting (XSS) - Stored in livehelperchat/livehelperchat 0.6%
- CVE-2022-0375 Cross-site Scripting (XSS) - Stored in livehelperchat/livehelperchat 0.7%
- CVE-2022-0374 Cross-site Scripting (XSS) - Stored in livehelperchat/livehelperchat 0.7%
- CVE-2022-0266 Authorization Bypass Through User-Controlled Key in livehelperchat/livehelperchat 1.1%
- CVE-2022-0245 Cross-Site Request Forgery (CSRF) in livehelperchat/livehelperchat 0.4%
- CVE-2022-0253 Cross-site Scripting (XSS) - Stored in livehelperchat/livehelperchat 0.8%
- CVE-2022-0226 Cross-Site Request Forgery (CSRF) in livehelperchat/livehelperchat 0.4%
- CVE-2022-0231 Cross-Site Request Forgery (CSRF) in livehelperchat/livehelperchat 0.5%
- CVE-2022-0083 Generation of Error Message Containing Sensitive Information in livehelperchat/livehelperchat 0.9%
- CVE-2021-4175 Cross-site Scripting (XSS) - Stored in livehelperchat/livehelperchat 0.5%
- CVE-2021-4176 Cross-site Scripting (XSS) - Reflected in livehelperchat/livehelperchat 0.8%
- CVE-2021-4179 Cross-site Scripting (XSS) - Stored in livehelperchat/livehelperchat 0.5%
- CVE-2021-4177 Generation of Error Message Containing Sensitive Information in livehelperchat/livehelperchat 1.0%
- CVE-2021-4169 Cross-site Scripting (XSS) - Reflected in livehelperchat/livehelperchat 1.0%