← All advisories

Medium severity6.1NVD Advisory· Published Oct 2, 2020· Updated Jun 17, 2026

CVE-2020-26135

CVE-2020-26135

Description

Live Helper Chat before 3.44v allows reflected XSS via the setsettingajax PATH_INFO.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

4

Live Helper Chat/Live Helper Chatdescription
Livehelperchat/Livehelperchat
cpe:2.3:a:livehelperchat:live_helper_chat:*:*:*:*:*:*:*:*
Range: <3.44
Live Helper Chat/Live Helper Chatllm-fuzzy
Range: <3.44v
osv-coords
pkg:bitnami/livehelperchat
Range: < 3.44.0

Patches

Vulnerability mechanics

References

4

github.com/LiveHelperChat/livehelperchat/commit/a131b937dd6a87271ed1c0c8b8deb8710cf78f58nvdPatchThird Party Advisory
github.com/rekter0/exploits/tree/master/CVE-2020-26134nvdThird Party Advisory
livehelperchat.com/3.44v-security-update-and-few-other-bits-586a.htmlnvdVendor Advisory
www.arista.com/en/support/advisories-notices/security-advisories/12602-security-advisory-63nvdThird Party Advisory

News mentions

0

No linked articles in our index yet.