Vulnerabilidades

Resumen — últimos 7 días

Vulnerabilidades nuevas2737▼ 486 respecto a la semana anterior

Críticas / altas1302▼ 188 respecto a la semana anterior

Nueva explotación activa (KEV)3▼ 5 respecto a la semana anterior

Sin puntuar (sin CVSS)227▼ 275 respecto a la semana anterior

48 resultados, ordenados por fecha de publicación (más recientes primero)

CVE	Estado	Severidad	EPSS	Explotación activa	Tecnologías afectadas	Publicada ▼	Modificada	Descripción
CVE-2022-0374	Modificada	Media (5.4)	0.69%	—	Livehelperchat Live Helper Chat	26/1/2022	17/6/2026	Cross-site Scripting (XSS) - Stored in Packagist remdex/livehelperchat prior to 3.93v.
CVE-2022-0266	Modificada	Media (6.6)	1.1%	—	Livehelperchat Live Helper Chat	19/1/2022	17/6/2026	Authorization Bypass Through User-Controlled Key in Packagist remdex/livehelperchat prior to 3.92v.
CVE-2022-0245	Modificada	Media (4.3)	0.44%	—	Livehelperchat	18/1/2022	17/6/2026	Cross-Site Request Forgery (CSRF) in GitHub repository livehelperchat/livehelperchat prior to 2.0.
CVE-2022-0253	Modificada	Media (5.4)	0.81%	—	Livehelperchat	17/1/2022	17/6/2026	livehelperchat is vulnerable to Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2022-0226	Modificada	Media (4.3)	0.43%	—	Livehelperchat Live Helper Chat	14/1/2022	17/6/2026	livehelperchat is vulnerable to Cross-Site Request Forgery (CSRF)
CVE-2022-0231	Modificada	Media (6.5)	0.51%	—	Livehelperchat Live Helper Chat	14/1/2022	17/6/2026	livehelperchat is vulnerable to Cross-Site Request Forgery (CSRF)
CVE-2022-0083	Modificada	Media (5.3)	0.90%	—	Livehelperchat Live Helper Chat	4/1/2022	17/6/2026	livehelperchat is vulnerable to Generation of Error Message Containing Sensitive Information
CVE-2021-4176	Modificada	Media (6.1)	0.78%	—	Livehelperchat Live Helper Chat	29/12/2021	17/6/2026	livehelperchat is vulnerable to Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2021-4175	Modificada	Media (5.4)	0.53%	—	Livehelperchat Live Helper Chat	29/12/2021	17/6/2026	livehelperchat is vulnerable to Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2021-4179	Modificada	Media (5.4)	0.46%	—	Livehelperchat Live Helper Chat	28/12/2021	17/6/2026	livehelperchat is vulnerable to Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2021-4177	Modificada	Media (5.3)	0.92%	—	Livehelperchat Live Helper Chat	28/12/2021	17/6/2026	livehelperchat is vulnerable to Generation of Error Message Containing Sensitive Information
CVE-2021-4169	Modificada	Media (6.1)	0.95%	—	Livehelperchat Live Helper Chat	26/12/2021	17/6/2026	livehelperchat is vulnerable to Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2021-4131	Modificada	Alta (8.8)	0.54%	—	Livehelperchat Live Helper Chat	18/12/2021	17/6/2026	livehelperchat is vulnerable to Cross-Site Request Forgery (CSRF)
CVE-2021-4132	Modificada	Media (5.4)	0.63%	—	Livehelperchat Live Helper Chat	17/12/2021	17/6/2026	livehelperchat is vulnerable to Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2021-4123	Modificada	Media (6.5)	0.49%	—	Livehelperchat Live Helper Chat	16/12/2021	17/6/2026	livehelperchat is vulnerable to Cross-Site Request Forgery (CSRF)
CVE-2021-4050	Modificada	Media (6.1)	0.88%	—	Livehelperchat Live Helper Chat	8/12/2021	17/6/2026	livehelperchat is vulnerable to Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2021-4049	Modificada	Media (6.5)	0.44%	—	Livehelperchat Live Helper Chat	7/12/2021	17/6/2026	livehelperchat is vulnerable to Cross-Site Request Forgery (CSRF)
CVE-2020-26135	Modificada	Media (6.1)	1.0%	—	Livehelperchat Live Helper Chat	2/10/2020	17/6/2026	Live Helper Chat before 3.44v allows reflected XSS via the setsettingajax PATH_INFO.
CVE-2020-26134	Modificada	Media (6.1)	1.1%	—	Livehelperchat Live Helper Chat	2/10/2020	17/6/2026	Live Helper Chat before 3.44v allows stored XSS in chat messages with an operator via BBCode.
CVE-2017-1000059	Modificada	Media (6.1)	1.1%	—	Livehelperchat Live Helper Chat	17/7/2017	17/6/2026	Live Helper Chat version 2.06v and older is vulnerable to Cross-Site Scripting in the HTTP Header handling resulting in the execution of any user provided Javascript code in the session of other users.
CVE-2014-4513	Modificada	Media (4.3)	4.6%	💥 Exploit	Activehelper Livehelp Live Chat	1/7/2014	17/6/2026	Multiple cross-site scripting (XSS) vulnerabilities in server/offline.php in the ActiveHelper LiveHelp Live Chat plugin 3.1.0 and earlier for WordPress allow remote attackers to inject arbitrary web script or HTML via the (1) MESSAGE, (2) EMAIL, or (3) NAME parameter.
CVE-2010-2046	Modificada	Media (4.3)	1.1%	—	COM Activehelper Livehelp	25/5/2010	16/6/2026	Multiple cross-site scripting (XSS) vulnerabilities in the ActiveHelper LiveHelp (com_activehelper_livehelp) component 2.0.3 for Joomla! allow remote attackers to inject arbitrary web script or HTML via (1) the DOMAINID parameter to server/cookies.php or (2) the SERVER parameter to server/index.php.
CVE-2009-1618	Modificada	Alta (7.5)	2.5%	💥 Exploit	Teraway Livehelp	12/5/2009	16/6/2026	Teraway LiveHelp 2.0 allows remote attackers to bypass authentication and gain administrative access via a pwd=&lvl=1&usr=&alias=admin&userid=1 value for the TWLHadmin cookie.