{"items":[{"id":"CVE-2026-44633","published":"2026-05-14T18:46:52.064Z","updated":"2026-05-14T19:42:29.313Z","title":"Live Helper Chat: REST API chat update accepts arbitrary chat fields across department boundaries","severity":"HIGH","score":8.1,"vendor":"LiveHelperChat","product":"livehelperchat","kev":false,"epss":0.0027,"kevAdded":null},{"id":"CVE-2026-27954","published":"2026-02-26T01:42:38.225Z","updated":"2026-02-26T19:30:20.351Z","title":"LiveHelperChat has department-level authorization bypass in holdaction, blockuser, and transferchat endpoints","severity":"MEDIUM","score":4.9,"vendor":"LiveHelperChat","product":"livehelperchat","kev":false,"epss":0.0022,"kevAdded":null},{"id":"CVE-2026-0483","published":"2026-01-28T11:43:42.484Z","updated":"2026-01-28T15:47:13.081Z","title":"Stored Cross-Site Scripting (XSS) vulnerability in LiveHelperChat","severity":"MEDIUM","score":6.9,"vendor":"LiveHelperChat","product":"LiveHelperChat","kev":false,"epss":0.00289,"kevAdded":null},{"id":"CVE-2025-7435","published":"2025-07-11T02:02:07.812Z","updated":"2025-07-11T13:25:38.312Z","title":"LiveHelperChat lhc-php-resque Extension List list cross site scripting","severity":"MEDIUM","score":5.1,"vendor":"LiveHelperChat","product":"lhc-php-resque Extension","kev":false,"epss":0.00297,"kevAdded":null},{"id":"CVE-2022-1530","published":"2022-04-29T08:50:10.000Z","updated":"2024-08-03T00:10:02.958Z","title":"Cross-site Scripting (XSS) in livehelperchat/livehelperchat","severity":"LOW","score":3.8,"vendor":"livehelperchat","product":"livehelperchat/livehelperchat","kev":false,"epss":0.00651,"kevAdded":null},{"id":"CVE-2022-0935","published":"2022-04-07T18:21:42.000Z","updated":"2024-08-02T23:47:42.640Z","title":"Host Header injection in password Reset in livehelperchat/livehelperchat","severity":"HIGH","score":8.8,"vendor":"livehelperchat","product":"livehelperchat/livehelperchat","kev":false,"epss":0.0134,"kevAdded":null},{"id":"CVE-2022-1234","published":"2022-04-06T03:10:15.000Z","updated":"2024-08-02T23:55:24.544Z","title":"XSS in livehelperchat in livehelperchat/livehelperchat","severity":"HIGH","score":8.8,"vendor":"livehelperchat","product":"livehelperchat/livehelperchat","kev":false,"epss":0.00726,"kevAdded":null},{"id":"CVE-2022-1235","published":"2022-04-05T06:30:15.000Z","updated":"2024-08-02T23:55:24.549Z","title":"Weak secrethash can be brute-forced in livehelperchat/livehelperchat","severity":"HIGH","score":7.5,"vendor":"livehelperchat","product":"livehelperchat/livehelperchat","kev":false,"epss":0.00556,"kevAdded":null},{"id":"CVE-2022-1213","published":"2022-04-05T03:45:13.000Z","updated":"2024-08-02T23:55:24.329Z","title":"SSRF filter bypass port 80, 433 in livehelperchat/livehelperchat","severity":"HIGH","score":7.7,"vendor":"livehelperchat","product":"livehelperchat/livehelperchat","kev":false,"epss":0.0058,"kevAdded":null},{"id":"CVE-2022-1176","published":"2022-03-31T10:10:10.000Z","updated":"2024-08-02T23:55:24.377Z","title":"Loose comparison causes IDOR on multiple endpoints in livehelperchat/livehelperchat","severity":"HIGH","score":7.5,"vendor":"livehelperchat","product":"livehelperchat/livehelperchat","kev":false,"epss":0.0125,"kevAdded":null},{"id":"CVE-2022-1191","published":"2022-03-31T08:35:09.000Z","updated":"2024-08-02T23:55:24.613Z","title":"SSRF on index.php/cobrowse/proxycss/ in livehelperchat/livehelperchat","severity":"HIGH","score":8.7,"vendor":"livehelperchat","product":"livehelperchat/livehelperchat","kev":false,"epss":0.00955,"kevAdded":null},{"id":"CVE-2022-0612","published":"2022-02-16T05:40:09.000Z","updated":"2024-08-02T23:32:46.545Z","title":"Cross-site Scripting (XSS) - Stored in livehelperchat/livehelperchat","severity":"MEDIUM","score":6.7,"vendor":"livehelperchat","product":"livehelperchat/livehelperchat","kev":false,"epss":0.00607,"kevAdded":null},{"id":"CVE-2022-0502","published":"2022-02-06T10:50:10.000Z","updated":"2024-08-02T23:32:45.257Z","title":"Cross-site Scripting (XSS) - Stored in livehelperchat/livehelperchat","severity":"MEDIUM","score":6.5,"vendor":"livehelperchat","product":"livehelperchat/livehelperchat","kev":false,"epss":0.00607,"kevAdded":null},{"id":"CVE-2022-0395","published":"2022-01-28T21:31:31.000Z","updated":"2024-08-02T23:25:40.326Z","title":"Cross-site Scripting (XSS) - Stored in livehelperchat/livehelperchat","severity":"MEDIUM","score":6.5,"vendor":"livehelperchat","product":"livehelperchat/livehelperchat","kev":false,"epss":0.0064,"kevAdded":null},{"id":"CVE-2022-0394","published":"2022-01-28T10:16:27.000Z","updated":"2025-06-09T15:00:58.653Z","title":"Cross-site Scripting (XSS) - Stored in livehelperchat/livehelperchat","severity":"MEDIUM","score":5.3,"vendor":"livehelperchat","product":"livehelperchat/livehelperchat","kev":false,"epss":0.00547,"kevAdded":null},{"id":"CVE-2022-0370","published":"2022-01-27T05:55:09.000Z","updated":"2024-08-02T23:25:40.269Z","title":"Cross-site Scripting (XSS) - Stored in livehelperchat/livehelperchat","severity":"HIGH","score":7.1,"vendor":"livehelperchat","product":"livehelperchat/livehelperchat","kev":false,"epss":0.00766,"kevAdded":null},{"id":"CVE-2022-0387","published":"2022-01-27T05:20:09.000Z","updated":"2024-08-02T23:25:40.561Z","title":"Cross-site Scripting (XSS) - Stored in livehelperchat/livehelperchat","severity":"MEDIUM","score":6.3,"vendor":"livehelperchat","product":"livehelperchat/livehelperchat","kev":false,"epss":0.00634,"kevAdded":null},{"id":"CVE-2022-0375","published":"2022-01-26T09:30:10.000Z","updated":"2024-08-02T23:25:40.238Z","title":"Cross-site Scripting (XSS) - Stored in livehelperchat/livehelperchat","severity":"MEDIUM","score":6.5,"vendor":"livehelperchat","product":"livehelperchat/livehelperchat","kev":false,"epss":0.007,"kevAdded":null},{"id":"CVE-2022-0374","published":"2022-01-26T09:15:11.000Z","updated":"2024-08-02T23:25:40.539Z","title":"Cross-site Scripting (XSS) - Stored in livehelperchat/livehelperchat","severity":"MEDIUM","score":6.5,"vendor":"livehelperchat","product":"livehelperchat/livehelperchat","kev":false,"epss":0.00687,"kevAdded":null},{"id":"CVE-2022-0266","published":"2022-01-19T05:20:10.000Z","updated":"2024-08-02T23:25:40.180Z","title":"Authorization Bypass Through User-Controlled Key in livehelperchat/livehelperchat","severity":"MEDIUM","score":6.5,"vendor":"livehelperchat","product":"livehelperchat/livehelperchat","kev":false,"epss":0.01086,"kevAdded":null},{"id":"CVE-2022-0245","published":"2022-01-18T05:15:10.000Z","updated":"2024-08-02T23:18:42.847Z","title":"Cross-Site Request Forgery (CSRF) in livehelperchat/livehelperchat","severity":"MEDIUM","score":5.7,"vendor":"livehelperchat","product":"livehelperchat/livehelperchat","kev":false,"epss":0.00439,"kevAdded":null},{"id":"CVE-2022-0253","published":"2022-01-17T13:15:09.000Z","updated":"2024-08-02T23:25:40.447Z","title":"Cross-site Scripting (XSS) - Stored in livehelperchat/livehelperchat","severity":"HIGH","score":7.1,"vendor":"livehelperchat","product":"livehelperchat/livehelperchat","kev":false,"epss":0.00813,"kevAdded":null},{"id":"CVE-2022-0226","published":"2022-01-14T19:00:11.000Z","updated":"2024-08-02T23:18:42.894Z","title":"Cross-Site Request Forgery (CSRF) in livehelperchat/livehelperchat","severity":"MEDIUM","score":4.3,"vendor":"livehelperchat","product":"livehelperchat/livehelperchat","kev":false,"epss":0.00434,"kevAdded":null},{"id":"CVE-2022-0231","published":"2022-01-14T12:05:10.000Z","updated":"2024-08-02T23:18:42.876Z","title":"Cross-Site Request Forgery (CSRF) in livehelperchat/livehelperchat","severity":"MEDIUM","score":5.7,"vendor":"livehelperchat","product":"livehelperchat/livehelperchat","kev":false,"epss":0.00512,"kevAdded":null},{"id":"CVE-2022-0083","published":"2022-01-04T06:15:12.000Z","updated":"2024-08-02T23:18:41.639Z","title":"Generation of Error Message Containing Sensitive Information in livehelperchat/livehelperchat","severity":"HIGH","score":7.3,"vendor":"livehelperchat","product":"livehelperchat/livehelperchat","kev":false,"epss":0.00929,"kevAdded":null},{"id":"CVE-2021-4175","published":"2021-12-29T14:35:17.000Z","updated":"2024-08-03T17:16:04.261Z","title":"Cross-site Scripting (XSS) - Stored in livehelperchat/livehelperchat","severity":"MEDIUM","score":6.6,"vendor":"livehelperchat","product":"livehelperchat/livehelperchat","kev":false,"epss":0.00549,"kevAdded":null},{"id":"CVE-2021-4176","published":"2021-12-29T14:35:12.000Z","updated":"2024-08-03T17:16:04.247Z","title":"Cross-site Scripting (XSS) - Reflected in livehelperchat/livehelperchat","severity":"MEDIUM","score":5.4,"vendor":"livehelperchat","product":"livehelperchat/livehelperchat","kev":false,"epss":0.00811,"kevAdded":null},{"id":"CVE-2021-4179","published":"2021-12-28T08:35:09.000Z","updated":"2024-08-03T17:16:04.269Z","title":"Cross-site Scripting (XSS) - Stored in livehelperchat/livehelperchat","severity":"MEDIUM","score":6.6,"vendor":"livehelperchat","product":"livehelperchat/livehelperchat","kev":false,"epss":0.00475,"kevAdded":null},{"id":"CVE-2021-4177","published":"2021-12-28T06:00:11.000Z","updated":"2024-08-03T17:16:04.274Z","title":"Generation of Error Message Containing Sensitive Information in livehelperchat/livehelperchat","severity":"MEDIUM","score":4.3,"vendor":"livehelperchat","product":"livehelperchat/livehelperchat","kev":false,"epss":0.00955,"kevAdded":null},{"id":"CVE-2021-4169","published":"2021-12-26T11:35:09.000Z","updated":"2024-08-03T17:16:04.241Z","title":"Cross-site Scripting (XSS) - Reflected in livehelperchat/livehelperchat","severity":"MEDIUM","score":5.4,"vendor":"livehelperchat","product":"livehelperchat/livehelperchat","kev":false,"epss":0.00974,"kevAdded":null},{"id":"CVE-2021-4131","published":"2021-12-18T06:20:10.000Z","updated":"2024-08-03T17:16:04.159Z","title":"Cross-Site Request Forgery (CSRF) in livehelperchat/livehelperchat","severity":"MEDIUM","score":6.5,"vendor":"livehelperchat","product":"livehelperchat/livehelperchat","kev":false,"epss":0.00557,"kevAdded":null},{"id":"CVE-2021-4132","published":"2021-12-17T12:45:09.000Z","updated":"2024-08-03T17:16:04.236Z","title":"Cross-site Scripting (XSS) - Stored in livehelperchat/livehelperchat","severity":"HIGH","score":7.3,"vendor":"livehelperchat","product":"livehelperchat/livehelperchat","kev":false,"epss":0.00655,"kevAdded":null},{"id":"CVE-2021-4123","published":"2021-12-16T10:10:10.000Z","updated":"2024-08-03T17:16:04.183Z","title":"Cross-Site Request Forgery (CSRF) in livehelperchat/livehelperchat","severity":"MEDIUM","score":6.5,"vendor":"livehelperchat","product":"livehelperchat/livehelperchat","kev":false,"epss":0.00506,"kevAdded":null},{"id":"CVE-2021-4050","published":"2021-12-08T10:45:12.000Z","updated":"2024-08-03T17:16:03.473Z","title":"Cross-site Scripting (XSS) - Stored in livehelperchat/livehelperchat","severity":"MEDIUM","score":6.1,"vendor":"livehelperchat","product":"livehelperchat/livehelperchat","kev":false,"epss":0.00878,"kevAdded":null},{"id":"CVE-2021-4049","published":"2021-12-07T10:40:10.000Z","updated":"2024-08-03T17:16:02.984Z","title":"Cross-Site Request Forgery (CSRF) in livehelperchat/livehelperchat","severity":"MEDIUM","score":4.3,"vendor":"livehelperchat","product":"livehelperchat/livehelperchat","kev":false,"epss":0.00441,"kevAdded":null}]}