Stored XSS Vulnerability in Live Helper Chat Plugin by Live Helper Chat
CVE-2020-26134

6.1MEDIUM

Key Information:

Vendor: Livehelperchat
Status: Live Helper Chat
Vendor: CVE Published:; 2 October 2020

🔔 Create Livehelperchat Vulnerability Alert

Badges

👾 Exploit Exists

What is CVE-2020-26134?

Live Helper Chat prior to version 3.44 is susceptible to a stored Cross-Site Scripting (XSS) vulnerability. This flaw allows an attacker to embed malicious scripts within chat messages that can be executed when viewed by an operator. Exploiting this vulnerability can lead to unauthorized actions and potential data theft. Users are strongly advised to update to version 3.44 or later to mitigate this risk and enhance their security posture.