- Latest release
- Not known: cve.now hasn't read this package's releases
- Newest unaffected release
- Not known without release data
- Advisories
- 23 · 1 critical, 7 high, 14 medium, 1 low
- Registry
- Packagist
Advisories 23
- CVE-2024-27516Critical 9.8
Server-Side Template Injection (SSTI) vulnerability in livehelperchat before 4.34v, allows remote attackers to execute arbitrary code and…
Affected: fixed in 4.29.
- CVE-2022-1530Low 3.8
Cross-site Scripting (XSS) in livehelperchat/livehelperchat
Affected: fixed in 3.99.
- CVE-2022-1235High 7.5
Weak secrethash can be brute-forced in livehelperchat/livehelperchat
Affected: fixed in 3.96.
- CVE-2022-1213High 7.7
SSRF filter bypass port 80, 433 in livehelperchat/livehelperchat
Affected: fixed in 3.67.
- CVE-2022-1176High 7.5
Loose comparison causes IDOR on multiple endpoints in livehelperchat/livehelperchat
Affected: fixed in 3.96.
- CVE-2022-0612Medium 6.7
Cross-site Scripting (XSS) - Stored in livehelperchat/livehelperchat
Affected: fixed in 3.93.
- CVE-2022-0502Medium 6.5
Cross-site Scripting (XSS) - Stored in livehelperchat/livehelperchat
Affected: fixed in 3.93.
- CVE-2022-0395Medium 6.5
Cross-site Scripting (XSS) - Stored in livehelperchat/livehelperchat
Affected: fixed in 3.93.
- CVE-2022-0394Medium 5.3
Cross-site Scripting (XSS) - Stored in livehelperchat/livehelperchat
Affected: fixed in 3.93.
- CVE-2022-0370High 7.1
Cross-site Scripting (XSS) - Stored in livehelperchat/livehelperchat
Affected: fixed in 3.93.
- CVE-2022-0387Medium 6.3
Cross-site Scripting (XSS) - Stored in livehelperchat/livehelperchat
Affected: fixed in 3.93.
- CVE-2022-0375Medium 6.5
Cross-site Scripting (XSS) - Stored in livehelperchat/livehelperchat
Affected: fixed in 3.93.
- CVE-2022-0374Medium 6.5
Cross-site Scripting (XSS) - Stored in livehelperchat/livehelperchat
Affected: fixed in 3.93.
- CVE-2022-0266Medium 6.5
Authorization Bypass Through User-Controlled Key in livehelperchat/livehelperchat
Affected: fixed in 3.92.
- CVE-2022-0253High 7.1
Cross-site Scripting (XSS) - Stored in livehelperchat/livehelperchat
Affected: through 3.91.
Show all 23 advisoriesShow fewer advisories
- CVE-2022-0226Medium 4.3
Cross-Site Request Forgery (CSRF) in livehelperchat/livehelperchat
Affected: fixed in 3.92.
- CVE-2022-0231Medium 5.7
Cross-Site Request Forgery (CSRF) in livehelperchat/livehelperchat
Affected: fixed in 3.92.
- CVE-2022-0083High 7.3
Generation of Error Message Containing Sensitive Information in livehelperchat/livehelperchat
Affected: fixed in 3.91.
- CVE-2021-4131Medium 6.5
Cross-Site Request Forgery (CSRF) in livehelperchat/livehelperchat
Affected: fixed in 3.91.
- CVE-2021-4132High 7.3
Cross-site Scripting (XSS) - Stored in livehelperchat/livehelperchat
Affected: fixed in 3.91.
- CVE-2021-4123Medium 6.5
Cross-Site Request Forgery (CSRF) in livehelperchat/livehelperchat
Affected: through 3.90.
- CVE-2021-4050Medium 6.1
Cross-site Scripting (XSS) - Stored in livehelperchat/livehelperchat
Affected: through 2.0.
- CVE-2021-4049Medium 4.3
Cross-Site Request Forgery (CSRF) in livehelperchat/livehelperchat
Affected: through 2.0.