Predictive Vulnerability Intelligence.

Product

  • Product
  • Pricing
  • Documentation

Company

  • About
  • Partnerships
  • Blog
  • Support

Legal

  • Terms
  • Privacy
  • Data Licensing

© 2026 FAUCET Technologies LLC. All rights reserved.

Livehelperchat

First CVE: Jul 17, 2017Active for: 9 yearsTotal CVEs: 43
32.8
VTI Score
Medium

Livehelperchat is a modestly represented live chat and customer-engagement platform product that, despite a narrow portfolio focus, has attracted sustained vulnerability research attention. The vendor's vulnerability profile concentrates on web-application-layer weaknesses including cross-site scripting, cross-site request forgery, server-side request forgery, and information disclosure through error messages, which are characteristic of web-facing communication systems. A notable tendency exists toward public exploit-code availability across the vendor's disclosures, reflecting the accessibility and appeal of the platform as a research and proof-of-concept target. Defenders deploying this product should prioritize input handling and session management controls, treat each advisory as potentially carrying available tooling, and maintain close update discipline. Current severity, exploitation, and exposure details are shown alongside this summary.

FAUCET AI Generated
43
Total CVEs
More Total CVEs than 98% of tracked vendors
3.1
Avg CVEs / Product / Year
More Avg CVEs / Product / Year than 94% of tracked vendors
6.2
Avg CVSS Score
Higher Avg CVSS Score than 35% of tracked vendors
0.0%
In CISA KEV
Bottom 1%

Trends Over Time

The number and severity of CVEs published that impact products developed by Livehelperchat over time

Volume of CVEsAvg CVSS Base Score
First CVE
Jul 17, 2017
9 years ago
Most Recent CVE
Feb 26, 2026
148 days ago

Products(2 total)

Top CVEs

Signals from CVEs in this vendor scope (43 CVEs).

43 CVEs · Highest risk first

CVEPublishedCVSSRiskKEVExploit
CVE-2022-0935HIGH
Host Header injection in password Reset in GitHub repository livehelperchat/livehelperchat prior to 3.97.
Apr 7, 20228.828NONO
CVE-2021-4131HIGH
livehelperchat is vulnerable to Cross-Site Request Forgery (CSRF)
Dec 18, 20218.828NONO
CVE-2025-51403MEDIUM
A stored cross-site scripting (XSS) vulnerability in the department assignment editing module of of Live Helper Chat v4.60 allows attackers to execute arbitrary web scripts or HTML
Jul 21, 20256.527NOYES
CVE-2024-27516CRITICAL
Server-Side Template Injection (SSTI) vulnerability in livehelperchat before 4.34v, allows remote attackers to execute arbitrary code and obtain sensitive information via the searc
Feb 29, 20249.826NONO
CVE-2022-1176HIGH
Loose comparison causes IDOR on multiple endpoints in GitHub repository livehelperchat/livehelperchat prior to 3.96.
Mar 31, 20227.526NONO
CVE-2025-51401MEDIUM
A stored cross-site scripting (XSS) vulnerability in the chat transfer function of Live Helper Chat v4.60 allows attackers to execute arbitrary web scripts or HTML via injecting a
Jul 21, 20255.424NOYES
CVE-2025-51400MEDIUM
A stored cross-site scripting (XSS) vulnerability in the Personal Canned Messages of Live Helper Chat v4.60 allows attackers to execute arbitrary web scripts or HTML via injecting
Jul 21, 20255.424NOYES
CVE-2025-51398MEDIUM
A stored cross-site scripting (XSS) vulnerability in the Facebook registration page of Live Helper Chat v4.60 allows attackers to execute arbitrary web scripts or HTML via injectin
Jul 21, 20255.424NOYES
CVE-2025-51397MEDIUM
A stored cross-site scripting (XSS) vulnerability in the Facebook Chat module of Live Helper Chat v4.60 allows attackers to execute arbitrary web scripts or HTML via injecting a cr
Jul 21, 20255.424NOYES
CVE-2025-51396MEDIUM
A stored cross-site scripting (XSS) vulnerability in Live Helper Chat v4.60 allows attackers to execute arbitrary web scripts or HTML via injecting a crafted payload into the Teleg
Jul 21, 20255.424NOYES
View all 43 CVEs →

CVE Severity & Scoring

Severity distribution of CVEs that affect this vendor's products43 CVEs
84%
14%
Severity distribution among all CVEs352,294 CVEs
45%
40%
11%
MediumHighCritical
Attack Vector
Local0 (0.0%)
Network43 (100.0%)
Unknown0 (0.0%)
Physical0 (0.0%)
Adjacent Network0 (0.0%)
Attack Complexity
Low42 (97.7%)
High1 (2.3%)
Unknown0 (0.0%)
User Interaction
None9 (20.9%)
Unknown0 (0.0%)
Required33 (76.7%)
Privileges Required
Low20 (46.5%)
High2 (4.7%)
None21 (48.8%)
Unknown0 (0.0%)

Exploit Exposure

Signals from CVEs in this vendor scope (43 CVEs).

CISA KEV
0 CVEs
0.0% of CVEs· Bottom 1%
Metasploit
0 CVEs
0.0% of CVEs· Bottom 1%
Nuclei
0 CVEs
0.0% of CVEs· Bottom 1%
ExploitDB
6 CVEs
14.0% of CVEs· 77th percentile

Social Chatter

An overview of all social media posts that mention a CVE ID that affects a product developed by Livehelperchat.

Media Mentions

Media articles that mention a CVE ID that affects a product developed by Livehelperchat — matched by CVE ID, not by vendor name.

Top CNAs Publishing CVEs For Livehelperchat's Products

View all 4 CNAs →

Top CWEs