Livehelperchat is a modestly represented live chat and customer-engagement platform product that, despite a narrow portfolio focus, has attracted sustained vulnerability research attention. The vendor's vulnerability profile concentrates on web-application-layer weaknesses including cross-site scripting, cross-site request forgery, server-side request forgery, and information disclosure through error messages, which are characteristic of web-facing communication systems. A notable tendency exists toward public exploit-code availability across the vendor's disclosures, reflecting the accessibility and appeal of the platform as a research and proof-of-concept target. Defenders deploying this product should prioritize input handling and session management controls, treat each advisory as potentially carrying available tooling, and maintain close update discipline. Current severity, exploitation, and exposure details are shown alongside this summary.
The number and severity of CVEs published that impact products developed by Livehelperchat over time
Signals from CVEs in this vendor scope (43 CVEs).
43 CVEs · Highest risk first
| CVE | Published | CVSS | Risk | KEV | Exploit |
|---|---|---|---|---|---|
CVE-2022-0935HIGH Host Header injection in password Reset in GitHub repository livehelperchat/livehelperchat prior to 3.97. | Apr 7, 2022 | 8.8 | 28 | NO | NO |
CVE-2021-4131HIGH livehelperchat is vulnerable to Cross-Site Request Forgery (CSRF) | Dec 18, 2021 | 8.8 | 28 | NO | NO |
CVE-2025-51403MEDIUM A stored cross-site scripting (XSS) vulnerability in the department assignment editing module of of Live Helper Chat v4.60 allows attackers to execute arbitrary web scripts or HTML | Jul 21, 2025 | 6.5 | 27 | NO | YES |
CVE-2024-27516CRITICAL Server-Side Template Injection (SSTI) vulnerability in livehelperchat before 4.34v, allows remote attackers to execute arbitrary code and obtain sensitive information via the searc | Feb 29, 2024 | 9.8 | 26 | NO | NO |
CVE-2022-1176HIGH Loose comparison causes IDOR on multiple endpoints in GitHub repository livehelperchat/livehelperchat prior to 3.96. | Mar 31, 2022 | 7.5 | 26 | NO | NO |
CVE-2025-51401MEDIUM A stored cross-site scripting (XSS) vulnerability in the chat transfer function of Live Helper Chat v4.60 allows attackers to execute arbitrary web scripts or HTML via injecting a | Jul 21, 2025 | 5.4 | 24 | NO | YES |
CVE-2025-51400MEDIUM A stored cross-site scripting (XSS) vulnerability in the Personal Canned Messages of Live Helper Chat v4.60 allows attackers to execute arbitrary web scripts or HTML via injecting | Jul 21, 2025 | 5.4 | 24 | NO | YES |
CVE-2025-51398MEDIUM A stored cross-site scripting (XSS) vulnerability in the Facebook registration page of Live Helper Chat v4.60 allows attackers to execute arbitrary web scripts or HTML via injectin | Jul 21, 2025 | 5.4 | 24 | NO | YES |
CVE-2025-51397MEDIUM A stored cross-site scripting (XSS) vulnerability in the Facebook Chat module of Live Helper Chat v4.60 allows attackers to execute arbitrary web scripts or HTML via injecting a cr | Jul 21, 2025 | 5.4 | 24 | NO | YES |
CVE-2025-51396MEDIUM A stored cross-site scripting (XSS) vulnerability in Live Helper Chat v4.60 allows attackers to execute arbitrary web scripts or HTML via injecting a crafted payload into the Teleg | Jul 21, 2025 | 5.4 | 24 | NO | YES |
Signals from CVEs in this vendor scope (43 CVEs).
An overview of all social media posts that mention a CVE ID that affects a product developed by Livehelperchat.
Media articles that mention a CVE ID that affects a product developed by Livehelperchat — matched by CVE ID, not by vendor name.