What’s Vulnerable › Vulnerabilities

CVE-2021-4132: Cross-site Scripting (XSS) - Stored in livehelperchat/livehelperchat

• Severity: medium (CVSS 5.4 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.7% probability of exploitation in the next 30 days
• Public exploit or detection template: yes
• Published: 2021-12-17 · updated 2026-06-17
• Weakness: CWE-79

Description

livehelperchat is vulnerable to Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')

Affected products

• livehelperchat/livehelperchat: through 3.90

References

• https://github.com/livehelperchat/livehelperchat/commit/55b1e3bf62c564db7c919f5293ec1e755c2958d6
• https://huntr.dev/bounties/7eb80e7c-bb7a-478d-9760-0ea2fa9dc0c2
• https://github.com/livehelperchat/livehelperchat/commit/55b1e3bf62c564db7c919f5293ec1e755c2958d6
• https://huntr.dev/bounties/7eb80e7c-bb7a-478d-9760-0ea2fa9dc0c2

Get alerted when CVE-2021-4132 or the next vulnerability affects your stack