Live Helper Chat vulnerabilities

2 known vulnerabilities in Live Helper Chat from LiveHelperChat. 2 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 9.8 Critical severity

  livehelperchat: Improper Neutralization of Special Elements used in an OS Command

  CVE-2024-27516Feb 29, 2024LiveHelperChatEPSS 1.47%

  Server-Side Template Injection (SSTI) vulnerability in livehelperchat before 4.34v, allows remote attackers to execute arbitrary code and obtain sensitive information via the search parameter in lhc_web/modules/lhfaq/faqweight.php.

• 8.1 High severity

  livehelperchat/livehelperchat: Server-Side Request Forgery

  CVE-2022-1213Apr 5, 2022LiveHelperChat

  SSRF filter bypass port 80, 433 in GitHub repository livehelperchat/livehelperchat prior to 3.67v. An attacker could make the application perform arbitrary requests, bypass CVE-2022-1191