What’s Vulnerable › Products

livehelperchat/livehelperchat vulnerabilities

40 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 9 published in the last 12 months.

Check whether your livehelperchat/livehelperchat version is affected

Latest livehelperchat/livehelperchat vulnerabilities

• CVE-2026-44633 — Live Helper Chat: REST API chat update accepts arbitrary chat fields across department boundaries (CVSS 8.1)
• CVE-2026-27954 — LiveHelperChat has department-level authorization bypass in holdaction, blockuser, and transferchat endpoints (CVSS 6.5)
• CVE-2026-0483 — Stored Cross-Site Scripting (XSS) vulnerability in LiveHelperChat (CVSS 6.9)
• CVE-2025-51403 — (CVSS 6.5)
• CVE-2025-51401 — (CVSS 5.4)
• CVE-2025-51400 — (CVSS 5.4)
• CVE-2025-51398 — (CVSS 5.4)
• CVE-2025-51397 — (CVSS 5.4)
• CVE-2025-51396 — (CVSS 5.4)
• CVE-2024-27516 — (CVSS 9.8)
• CVE-2022-1530 — Cross-site Scripting (XSS) in livehelperchat/livehelperchat (CVSS 6.1)
• CVE-2022-0935 — Host Header injection in password Reset in livehelperchat/livehelperchat (CVSS 8.8)
• CVE-2022-1234 — XSS in livehelperchat in livehelperchat/livehelperchat (CVSS 6.1)
• CVE-2022-1235 — Weak secrethash can be brute-forced in livehelperchat/livehelperchat (CVSS 8.2)
• CVE-2022-1213 — SSRF filter bypass port 80, 433 in livehelperchat/livehelperchat (CVSS 8.1)
• CVE-2022-1176 — Loose comparison causes IDOR on multiple endpoints in livehelperchat/livehelperchat (CVSS 7.5)
• CVE-2022-1191 — SSRF on index.php/cobrowse/proxycss/ in livehelperchat/livehelperchat (CVSS 8.1)
• CVE-2022-0612 — Cross-site Scripting (XSS) - Stored in livehelperchat/livehelperchat (CVSS 5.4)
• CVE-2022-0502 — Cross-site Scripting (XSS) - Stored in livehelperchat/livehelperchat (CVSS 5.4)
• CVE-2022-0395 — Cross-site Scripting (XSS) - Stored in livehelperchat/livehelperchat (CVSS 5.4)
• CVE-2022-0394 — Cross-site Scripting (XSS) - Stored in livehelperchat/livehelperchat (CVSS 5.4)
• CVE-2022-0375 — Cross-site Scripting (XSS) - Stored in livehelperchat/livehelperchat (CVSS 4.8)
• CVE-2022-0374 — Cross-site Scripting (XSS) - Stored in livehelperchat/livehelperchat (CVSS 5.4)
• CVE-2022-0266 — Authorization Bypass Through User-Controlled Key in livehelperchat/livehelperchat (CVSS 6.6)
• CVE-2022-0226 — Cross-Site Request Forgery (CSRF) in livehelperchat/livehelperchat (CVSS 4.3)