# remdex/livehelperchat (Packagist) vulnerabilities

23 known vulnerabilities (1 critical, 7 high, 14 medium, 1 low), with the versions each affects and the releases that fix them.

## At a glance

- Latest release: not known (cve.now hasn't read this package's releases)
- Newest unaffected release: not known without release data
- Registry: https://packagist.org/packages/remdex/livehelperchat

## Advisories (23)

### [CVE-2024-27516](https://cve.now/CVE-2024-27516): Server-Side Template Injection (SSTI) vulnerability in livehelperchat before 4.34v, allows remote attackers to execute arbitrary code and…

- Severity: Critical 9.8
- Published: Feb 28, 2024
- Affected: fixed in 4.29.

### [CVE-2022-1530](https://cve.now/CVE-2022-1530): Cross-site Scripting (XSS) in livehelperchat/livehelperchat

- Severity: Low 3.8
- Published: Apr 29, 2022
- Affected: fixed in 3.99.

### [CVE-2022-1235](https://cve.now/CVE-2022-1235): Weak secrethash can be brute-forced in livehelperchat/livehelperchat

- Severity: High 7.5
- Published: Apr 5, 2022
- Affected: fixed in 3.96.

### [CVE-2022-1213](https://cve.now/CVE-2022-1213): SSRF filter bypass port 80, 433 in livehelperchat/livehelperchat

- Severity: High 7.7
- Published: Apr 5, 2022
- Affected: fixed in 3.67.

### [CVE-2022-1176](https://cve.now/CVE-2022-1176): Loose comparison causes IDOR on multiple endpoints in livehelperchat/livehelperchat

- Severity: High 7.5
- Published: Mar 31, 2022
- Affected: fixed in 3.96.

### [CVE-2022-0612](https://cve.now/CVE-2022-0612): Cross-site Scripting (XSS) - Stored in livehelperchat/livehelperchat

- Severity: Medium 6.7
- Published: Feb 16, 2022
- Affected: fixed in 3.93.

### [CVE-2022-0502](https://cve.now/CVE-2022-0502): Cross-site Scripting (XSS) - Stored in livehelperchat/livehelperchat

- Severity: Medium 6.5
- Published: Feb 6, 2022
- Affected: fixed in 3.93.

### [CVE-2022-0395](https://cve.now/CVE-2022-0395): Cross-site Scripting (XSS) - Stored in livehelperchat/livehelperchat

- Severity: Medium 6.5
- Published: Jan 28, 2022
- Affected: fixed in 3.93.

### [CVE-2022-0394](https://cve.now/CVE-2022-0394): Cross-site Scripting (XSS) - Stored in livehelperchat/livehelperchat

- Severity: Medium 5.3
- Published: Jan 28, 2022
- Affected: fixed in 3.93.

### [CVE-2022-0370](https://cve.now/CVE-2022-0370): Cross-site Scripting (XSS) - Stored in livehelperchat/livehelperchat

- Severity: High 7.1
- Published: Jan 27, 2022
- Affected: fixed in 3.93.

### [CVE-2022-0387](https://cve.now/CVE-2022-0387): Cross-site Scripting (XSS) - Stored in livehelperchat/livehelperchat

- Severity: Medium 6.3
- Published: Jan 27, 2022
- Affected: fixed in 3.93.

### [CVE-2022-0375](https://cve.now/CVE-2022-0375): Cross-site Scripting (XSS) - Stored in livehelperchat/livehelperchat

- Severity: Medium 6.5
- Published: Jan 26, 2022
- Affected: fixed in 3.93.

### [CVE-2022-0374](https://cve.now/CVE-2022-0374): Cross-site Scripting (XSS) - Stored in livehelperchat/livehelperchat

- Severity: Medium 6.5
- Published: Jan 26, 2022
- Affected: fixed in 3.93.

### [CVE-2022-0266](https://cve.now/CVE-2022-0266): Authorization Bypass Through User-Controlled Key in livehelperchat/livehelperchat

- Severity: Medium 6.5
- Published: Jan 19, 2022
- Affected: fixed in 3.92.

### [CVE-2022-0253](https://cve.now/CVE-2022-0253): Cross-site Scripting (XSS) - Stored in livehelperchat/livehelperchat

- Severity: High 7.1
- Published: Jan 17, 2022
- Affected: through 3.91.

### [CVE-2022-0226](https://cve.now/CVE-2022-0226): Cross-Site Request Forgery (CSRF) in livehelperchat/livehelperchat

- Severity: Medium 4.3
- Published: Jan 14, 2022
- Affected: fixed in 3.92.

### [CVE-2022-0231](https://cve.now/CVE-2022-0231): Cross-Site Request Forgery (CSRF) in livehelperchat/livehelperchat

- Severity: Medium 5.7
- Published: Jan 14, 2022
- Affected: fixed in 3.92.

### [CVE-2022-0083](https://cve.now/CVE-2022-0083): Generation of Error Message Containing Sensitive Information in livehelperchat/livehelperchat

- Severity: High 7.3
- Published: Jan 4, 2022
- Affected: fixed in 3.91.

### [CVE-2021-4131](https://cve.now/CVE-2021-4131): Cross-Site Request Forgery (CSRF) in livehelperchat/livehelperchat

- Severity: Medium 6.5
- Published: Dec 18, 2021
- Affected: fixed in 3.91.

### [CVE-2021-4132](https://cve.now/CVE-2021-4132): Cross-site Scripting (XSS) - Stored in livehelperchat/livehelperchat

- Severity: High 7.3
- Published: Dec 17, 2021
- Affected: fixed in 3.91.

### [CVE-2021-4123](https://cve.now/CVE-2021-4123): Cross-Site Request Forgery (CSRF) in livehelperchat/livehelperchat

- Severity: Medium 6.5
- Published: Dec 16, 2021
- Affected: through 3.90.

### [CVE-2021-4050](https://cve.now/CVE-2021-4050): Cross-site Scripting (XSS) - Stored in livehelperchat/livehelperchat

- Severity: Medium 6.1
- Published: Dec 8, 2021
- Affected: through 2.0.

### [CVE-2021-4049](https://cve.now/CVE-2021-4049): Cross-Site Request Forgery (CSRF) in livehelperchat/livehelperchat

- Severity: Medium 4.3
- Published: Dec 7, 2021
- Affected: through 2.0.

---

Source: cve.now
Built by [Sazabi](https://www.sazabi.com/?utm_source=cve-now&utm_medium=markdown), AI-native observability and security: automatic issue detection, plain-language log search and live dashboards.
Page: https://cve.now/packages/packagist/remdex/livehelperchat
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.