Bitnami package

livehelperchat

pkg:bitnami/livehelperchat

Vulnerabilities (29)

CVE	Sev	CVSS	Affected versions	Fixed in	Published	Description
CVE-2021-4177	Med	5.3	< 3.91.0	3.91.0	Dec 28, 2021	livehelperchat is vulnerable to Generation of Error Message Containing Sensitive Information
CVE-2021-4169	Med	6.1	< 3.90.0	3.90.0	Dec 26, 2021	livehelperchat is vulnerable to Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2021-4131	Hig	8.8	< 2.0.0	2.0.0	Dec 18, 2021	livehelperchat is vulnerable to Cross-Site Request Forgery (CSRF)
CVE-2021-4132	Med	5.4	< 3.90.0	3.90.0	Dec 17, 2021	livehelperchat is vulnerable to Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2021-4123	Med	6.5	< 2.0.0	2.0.0	Dec 16, 2021	livehelperchat is vulnerable to Cross-Site Request Forgery (CSRF)
CVE-2021-4050	Med	6.1	—	—	Dec 8, 2021	livehelperchat is vulnerable to Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2021-4049	Med	6.5	< 2.0.0	2.0.0	Dec 7, 2021	livehelperchat is vulnerable to Cross-Site Request Forgery (CSRF)
CVE-2020-26135	Med	6.1	< 3.44.0	3.44.0	Oct 2, 2020	Live Helper Chat before 3.44v allows reflected XSS via the setsettingajax PATH_INFO.
CVE-2020-26134	Med	6.1	< 3.44.0	3.44.0	Oct 2, 2020	Live Helper Chat before 3.44v allows stored XSS in chat messages with an operator via BBCode.

CVE-2021-4177MedDec 28, 2021
affected < 3.91.0fixed 3.91.0
livehelperchat is vulnerable to Generation of Error Message Containing Sensitive Information
CVE-2021-4169MedDec 26, 2021
affected < 3.90.0fixed 3.90.0
livehelperchat is vulnerable to Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2021-4131HigDec 18, 2021
affected < 2.0.0fixed 2.0.0
livehelperchat is vulnerable to Cross-Site Request Forgery (CSRF)
CVE-2021-4132MedDec 17, 2021
affected < 3.90.0fixed 3.90.0
livehelperchat is vulnerable to Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2021-4123MedDec 16, 2021
affected < 2.0.0fixed 2.0.0
livehelperchat is vulnerable to Cross-Site Request Forgery (CSRF)
CVE-2021-4050MedDec 8, 2021
livehelperchat is vulnerable to Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2021-4049MedDec 7, 2021
affected < 2.0.0fixed 2.0.0
livehelperchat is vulnerable to Cross-Site Request Forgery (CSRF)
CVE-2020-26135MedOct 2, 2020
affected < 3.44.0fixed 3.44.0
Live Helper Chat before 3.44v allows reflected XSS via the setsettingajax PATH_INFO.
CVE-2020-26134MedOct 2, 2020
affected < 3.44.0fixed 3.44.0
Live Helper Chat before 3.44v allows stored XSS in chat messages with an operator via BBCode.

Page 2 of 2