CVE-2022-0266 – Authorization Bypass Through User-Controlled Key in livehelperchat/livehelperchat
https://notcve.org/view.php?id=CVE-2022-0266
Authorization Bypass Through User-Controlled Key in Packagist remdex/livehelperchat prior to 3.92v. Una Anulación de Autorización mediante una clave controlada por el usuario en Packagist remdex/livehelperchat versiones anteriores a 3.92v • https://github.com/livehelperchat/livehelperchat/commit/cc1122aed0d1ad9f05757eaea2ab9e6a924776bd https://huntr.dev/bounties/1ac267be-3af8-4774-89f2-77234d144d6b • CWE-639: Authorization Bypass Through User-Controlled Key •
CVE-2022-0245 – Cross-Site Request Forgery (CSRF) in livehelperchat/livehelperchat
https://notcve.org/view.php?id=CVE-2022-0245
Cross-Site Request Forgery (CSRF) in GitHub repository livehelperchat/livehelperchat prior to 2.0. Una vulnerabilidad de tipo Cross-Site Request Forgery (CSRF) en el repositorio de GitHub livehelperchat/livehelperchat versiones anteriores a 2.0 • https://github.com/livehelperchat/livehelperchat/commit/c2fa19afeb8b1ea927fea3fd452515c95f289fb9 https://huntr.dev/bounties/6a6aca72-32b7-45b3-a8ba-9b400b2d669c • CWE-352: Cross-Site Request Forgery (CSRF) •
CVE-2022-0253 – Cross-site Scripting (XSS) - Stored in livehelperchat/livehelperchat
https://notcve.org/view.php?id=CVE-2022-0253
livehelperchat is vulnerable to Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') livehelperchat es vulnerable a una Neutralización Inapropiada de la Entrada Durante la Generación de la Página Web ("Cross-site Scripting") • https://github.com/livehelperchat/livehelperchat/commit/407d0b1a1fa56fa6f824a19092774f10f4880437 https://huntr.dev/bounties/ac7f7eba-ee0b-4a50-bd89-29fd9b3e8303 • CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') •
CVE-2022-0226 – Cross-Site Request Forgery (CSRF) in livehelperchat/livehelperchat
https://notcve.org/view.php?id=CVE-2022-0226
livehelperchat is vulnerable to Cross-Site Request Forgery (CSRF) livehelperchat es vulnerable a un ataque de tipo Cross-Site Request Forgery (CSRF) • https://github.com/livehelperchat/livehelperchat/commit/f59ffb02984c0ce2fbb19ac39365066507de9370 https://huntr.dev/bounties/635d0abf-7680-47f6-a277-d9a91471c73f • CWE-352: Cross-Site Request Forgery (CSRF) •
CVE-2022-0231 – Cross-Site Request Forgery (CSRF) in livehelperchat/livehelperchat
https://notcve.org/view.php?id=CVE-2022-0231
livehelperchat is vulnerable to Cross-Site Request Forgery (CSRF) livehelperchat es vulnerable a un ataque de tipo Cross-Site Request Forgery (CSRF) • https://github.com/livehelperchat/livehelperchat/commit/6ad1349dc5e7503b00c5017499a0a895d7654a61 https://huntr.dev/bounties/adaf98cf-60ab-40e0-aa3b-42ba0d3b7cbf • CWE-352: Cross-Site Request Forgery (CSRF) •