LiveHelperChat vulnerabilities

CVEs per yearBy the year they were published

1. 202110
2. 202221
3. 20251
4. 20263

Newest CVEs

• CVE-2026-44633

  Live Helper Chat: REST API chat update accepts arbitrary chat fields across department boundaries

  LiveHelperChat · livehelperchat

  High8.1
• CVE-2026-27954

  LiveHelperChat has department-level authorization bypass in holdaction, blockuser, and transferchat endpoints

  LiveHelperChat · livehelperchat

  Medium4.9
• CVE-2026-0483

  Stored Cross-Site Scripting (XSS) vulnerability in LiveHelperChat

  LiveHelperChat · LiveHelperChat

  Medium6.9
• CVE-2025-7435

  LiveHelperChat lhc-php-resque Extension List list cross site scripting

  LiveHelperChat · lhc-php-resque Extension

  Medium5.1
• CVE-2022-1530

  Cross-site Scripting (XSS) in livehelperchat/livehelperchat

  livehelperchat · livehelperchat/livehelperchat

  Low3.8
• CVE-2022-0935

  Host Header injection in password Reset in livehelperchat/livehelperchat

  livehelperchat · livehelperchat/livehelperchat

  High8.8
• CVE-2022-1234

  XSS in livehelperchat in livehelperchat/livehelperchat

  livehelperchat · livehelperchat/livehelperchat

  High8.8
• CVE-2022-1235

  Weak secrethash can be brute-forced in livehelperchat/livehelperchat

  livehelperchat · livehelperchat/livehelperchat

  High7.5
• CVE-2022-1213

  SSRF filter bypass port 80, 433 in livehelperchat/livehelperchat

  livehelperchat · livehelperchat/livehelperchat

  High7.7
• CVE-2022-1176

  Loose comparison causes IDOR on multiple endpoints in livehelperchat/livehelperchat

  livehelperchat · livehelperchat/livehelperchat

  High7.5