{"id":8651,"date":"2025-07-22T05:51:24","date_gmt":"2025-07-22T05:51:24","guid":{"rendered":"http:\/\/localhost\/?p=8651"},"modified":"2025-07-22T05:51:24","modified_gmt":"2025-07-22T05:51:24","slug":"livehelperchat-461-stored-cross-site-scripting-xss-via-personal-canned-messages","status":"publish","type":"post","link":"https:\/\/zero.redgem.net\/?p=8651","title":{"rendered":"LiveHelperChat 4.61 – Stored Cross Site Scripting (XSS) via Personal Canned Messages"},"content":{"rendered":"

Exploit Details<\/h2>\n

Basic Information<\/h3>\n\n\n\n\n\n\n
Exploit Title<\/th>\nLiveHelperChat 4.61 – Stored Cross Site Scripting (XSS) via Personal Canned Messages<\/td>\n<\/tr>\n
Exploit ID<\/th>\nEDB-ID:52379<\/td>\n<\/tr>\n
Type<\/th>\nexploitdb<\/td>\n<\/tr>\n
Published<\/th>\n2025-07-22T00:00:00<\/td>\n<\/tr>\n
Modified<\/th>\n2025-07-22T00:00:00<\/td>\n<\/tr>\n<\/table>\n

CVSS Information<\/h3>\n\n\n\n
Severity<\/th>\nNONE<\/td>\n<\/tr>\n
Vector<\/th>\nNONE<\/td>\n<\/tr>\n<\/table>\n

AI Analysis<\/h3>\n\n\n\n\n\n\n
AI Description<\/th>\nA stored XSS vulnerability in LiveHelperChat allows attackers to inject malicious JavaScript via Personal Canned Messages, executing when an admin or operator uses the message. This can lead to session hijacking or unauthorized actions.<\/td>\n<\/tr>\n
AI Severity<\/th>\nHigh<\/td>\n<\/tr>\n
AI Vendor<\/th>\nLiveHelperChat<\/td>\n<\/tr>\n
AI Product<\/th>\nLiveHelperChat<\/td>\n<\/tr>\n
AI Version<\/th>\n\u22644.61<\/td>\n<\/tr>\n<\/table>\n

CVE Information<\/h3>\n
\n