# cve.now: Livehelperchat

The newest entries naming Livehelperchat as an affected vendor (up to 200), of 35 in all, 0 known exploited. Older ones are in the full catalog at https://cve.now/latest.md.

- [CVE-2026-44633](https://cve.now/CVE-2026-44633.md): Live Helper Chat: REST API chat update accepts arbitrary chat fields across department boundaries (CVSS 8.1)
- [CVE-2026-27954](https://cve.now/CVE-2026-27954.md): LiveHelperChat has department-level authorization bypass in holdaction, blockuser, and transferchat endpoints (CVSS 4.9)
- [CVE-2026-0483](https://cve.now/CVE-2026-0483.md): Stored Cross-Site Scripting (XSS) vulnerability in LiveHelperChat (CVSS 6.9)
- [CVE-2025-7435](https://cve.now/CVE-2025-7435.md): LiveHelperChat lhc-php-resque Extension List list cross site scripting (CVSS 5.1)
- [CVE-2022-1530](https://cve.now/CVE-2022-1530.md): Cross-site Scripting (XSS) in livehelperchat/livehelperchat (CVSS 3.8)
- [CVE-2022-0935](https://cve.now/CVE-2022-0935.md): Host Header injection in password Reset in livehelperchat/livehelperchat (CVSS 8.8)
- [CVE-2022-1234](https://cve.now/CVE-2022-1234.md): XSS in livehelperchat in livehelperchat/livehelperchat (CVSS 8.8)
- [CVE-2022-1235](https://cve.now/CVE-2022-1235.md): Weak secrethash can be brute-forced in livehelperchat/livehelperchat (CVSS 7.5)
- [CVE-2022-1213](https://cve.now/CVE-2022-1213.md): SSRF filter bypass port 80, 433 in livehelperchat/livehelperchat (CVSS 7.7)
- [CVE-2022-1176](https://cve.now/CVE-2022-1176.md): Loose comparison causes IDOR on multiple endpoints in livehelperchat/livehelperchat (CVSS 7.5)
- [CVE-2022-1191](https://cve.now/CVE-2022-1191.md): SSRF on index.php/cobrowse/proxycss/ in livehelperchat/livehelperchat (CVSS 8.7)
- [CVE-2022-0612](https://cve.now/CVE-2022-0612.md): Cross-site Scripting (XSS) - Stored in livehelperchat/livehelperchat (CVSS 6.7)
- [CVE-2022-0502](https://cve.now/CVE-2022-0502.md): Cross-site Scripting (XSS) - Stored in livehelperchat/livehelperchat (CVSS 6.5)
- [CVE-2022-0395](https://cve.now/CVE-2022-0395.md): Cross-site Scripting (XSS) - Stored in livehelperchat/livehelperchat (CVSS 6.5)
- [CVE-2022-0394](https://cve.now/CVE-2022-0394.md): Cross-site Scripting (XSS) - Stored in livehelperchat/livehelperchat (CVSS 5.3)
- [CVE-2022-0370](https://cve.now/CVE-2022-0370.md): Cross-site Scripting (XSS) - Stored in livehelperchat/livehelperchat (CVSS 7.1)
- [CVE-2022-0387](https://cve.now/CVE-2022-0387.md): Cross-site Scripting (XSS) - Stored in livehelperchat/livehelperchat (CVSS 6.3)
- [CVE-2022-0375](https://cve.now/CVE-2022-0375.md): Cross-site Scripting (XSS) - Stored in livehelperchat/livehelperchat (CVSS 6.5)
- [CVE-2022-0374](https://cve.now/CVE-2022-0374.md): Cross-site Scripting (XSS) - Stored in livehelperchat/livehelperchat (CVSS 6.5)
- [CVE-2022-0266](https://cve.now/CVE-2022-0266.md): Authorization Bypass Through User-Controlled Key in livehelperchat/livehelperchat (CVSS 6.5)
- [CVE-2022-0245](https://cve.now/CVE-2022-0245.md): Cross-Site Request Forgery (CSRF) in livehelperchat/livehelperchat (CVSS 5.7)
- [CVE-2022-0253](https://cve.now/CVE-2022-0253.md): Cross-site Scripting (XSS) - Stored in livehelperchat/livehelperchat (CVSS 7.1)
- [CVE-2022-0226](https://cve.now/CVE-2022-0226.md): Cross-Site Request Forgery (CSRF) in livehelperchat/livehelperchat (CVSS 4.3)
- [CVE-2022-0231](https://cve.now/CVE-2022-0231.md): Cross-Site Request Forgery (CSRF) in livehelperchat/livehelperchat (CVSS 5.7)
- [CVE-2022-0083](https://cve.now/CVE-2022-0083.md): Generation of Error Message Containing Sensitive Information in livehelperchat/livehelperchat (CVSS 7.3)
- [CVE-2021-4175](https://cve.now/CVE-2021-4175.md): Cross-site Scripting (XSS) - Stored in livehelperchat/livehelperchat (CVSS 6.6)
- [CVE-2021-4176](https://cve.now/CVE-2021-4176.md): Cross-site Scripting (XSS) - Reflected in livehelperchat/livehelperchat (CVSS 5.4)
- [CVE-2021-4179](https://cve.now/CVE-2021-4179.md): Cross-site Scripting (XSS) - Stored in livehelperchat/livehelperchat (CVSS 6.6)
- [CVE-2021-4177](https://cve.now/CVE-2021-4177.md): Generation of Error Message Containing Sensitive Information in livehelperchat/livehelperchat (CVSS 4.3)
- [CVE-2021-4169](https://cve.now/CVE-2021-4169.md): Cross-site Scripting (XSS) - Reflected in livehelperchat/livehelperchat (CVSS 5.4)
- [CVE-2021-4131](https://cve.now/CVE-2021-4131.md): Cross-Site Request Forgery (CSRF) in livehelperchat/livehelperchat (CVSS 6.5)
- [CVE-2021-4132](https://cve.now/CVE-2021-4132.md): Cross-site Scripting (XSS) - Stored in livehelperchat/livehelperchat (CVSS 7.3)
- [CVE-2021-4123](https://cve.now/CVE-2021-4123.md): Cross-Site Request Forgery (CSRF) in livehelperchat/livehelperchat (CVSS 6.5)
- [CVE-2021-4050](https://cve.now/CVE-2021-4050.md): Cross-site Scripting (XSS) - Stored in livehelperchat/livehelperchat (CVSS 6.1)
- [CVE-2021-4049](https://cve.now/CVE-2021-4049.md): Cross-Site Request Forgery (CSRF) in livehelperchat/livehelperchat (CVSS 4.3)

---

Source: cve.now
Built by [Sazabi](https://www.sazabi.com/?utm_source=cve-now&utm_medium=markdown), AI-native observability and security: automatic issue detection, plain-language log search and live dashboards.
Page: https://cve.now/vendors/livehelperchat
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.