repository icon
livehelperchat / livehelperchat Project repository

Live Helper Chat - live support for your website. Featuring web and mobile apps, Voice & Video & ScreenShare. Supports Telegram, Twilio (whatsapp), Facebook messenger including building a bot.

Submit a report

FIRST INTERACTION

WITHIN1 DAY

REVIEW

WITHIN1 DAY

FIX

WITHIN4 DAYS

UI REDRESSING
tharunavula
not applicable
Cross-site Scripting (XSS)
aggressiveuser
Low
•CVE-2022-1530
XSS in livehelperchat
mylong
High
•$10•CVE-2022-1234
SSRF filter bypass port 80, 433
nhienit2010
High
•$10•CVE-2022-1213
EXIF Geolocation Data Not Stripped From Uploaded Images (vulnerability)
tharunavula
Critical
•$20
Weak secrethash can be brute-forced
caioluders
High
•$12•CVE-2022-1235
SSRF on index.php/cobrowse/proxycss/
caioluders
High
•$10•CVE-2022-1191
Loose comparison causes IDOR on multiple endpoints
caioluders
High
•$18•CVE-2022-1176
Host Header injection in password Reset
noobexploiterhuntrdev
High
•$10•CVE-2022-0935
Cross-site Scripting (XSS) - Stored
khanhchauminh
Medium
•$10•CVE-2022-0612
Cross-site Scripting (XSS) - Stored
khanhchauminh
Medium
•$10•CVE-2022-0502
Cross-site Scripting (XSS) - Stored
asura-n
Medium
•$15•CVE-2022-0394
Cross-site Scripting (XSS) - Stored
khanhchauminh
Medium
•$18•CVE-2022-0395
Cross-site Scripting (XSS) - Stored
lovecppp
Medium
•$15•CVE-2022-0387
Cross-site Scripting (XSS) - Stored
khanhchauminh
Medium
•$24•CVE-2022-0375
Cross-site Scripting (XSS) - Stored
shubh123-tri
Medium
•$15•CVE-2022-0374
Cross-site Scripting (XSS) - Stored
shubh123-tri
High
•$15•CVE-2022-0370
Authorization Bypass Through User-Controlled Key
khanhchauminh
Medium
•$35•CVE-2022-0266
Cross-site Scripting (XSS) - Stored
shubh123-tri
High
•$17.5•CVE-2022-0253
Improper Use of Validation Framework
takester
Medium
•$3.5
Cross-Site Request Forgery (CSRF)
shubh123-tri
Medium
•$17.5•CVE-2022-0245
Cross-Site Request Forgery (CSRF)
shubh123-tri
Medium
•$17.5•CVE-2022-0231
Cross-Site Request Forgery (CSRF)
shubh123-tri
Medium
•CVE-2022-0226
Generation of Error Message Containing Sensitive Information
1d8
High
•$35•CVE-2022-0083
Cross-site Scripting (XSS) - Stored
p0cas
Medium
•$17.5•CVE-2021-4179
Cross-site Scripting (XSS) - Reflected
laladee
Medium
•$5•CVE-2021-4176
Cross-site Scripting (XSS) - Stored
laladee
Medium
•$17.5•CVE-2021-4175
Generation of Error Message Containing Sensitive Information
1d8
Medium
•$35•CVE-2021-4177
Cross-site Scripting (XSS) - Reflected
laladee
Medium
•$17.5•CVE-2021-4169
Cross-site Scripting (XSS) - Stored
x3rz
High
•$17.5•CVE-2021-4132
Cross-Site Request Forgery (CSRF)
khanhchauminh
Medium
•$17.5•CVE-2021-4131
Cross-Site Request Forgery (CSRF)
khanhchauminh
Medium
•$38.5•CVE-2021-4123
Cross-site Scripting (XSS) - Stored
khanhchauminh
Medium
•$17.5•CVE-2021-4050
Cross-Site Request Forgery (CSRF)
khanhchauminh
Medium
•$17.5•CVE-2021-4049
The UI Performs the Wrong Action
0xamal
Medium
•$15
Use of a Broken or Risky Cryptographic Algorithm
michaellrowley
Medium
•$21
Cross-site Scripting (XSS) - Stored
k1ssn00b
Medium
Cross-Site Request Forgery (CSRF)
ranjit-git
High
•$25
Cross-site Scripting (XSS) - Stored
ranjit-git
High
•$25
Cross-Site Request Forgery (CSRF)
ranjit-git
High
•$25
Cross-Site Request Forgery (CSRF)
ranjit-git
High
•$25
Cross-site Scripting (XSS) - Stored
ranjit-git
High
•$25
Cross-site Scripting (XSS) - Stored
govindpalakkal
Medium
•$25
Cross-site Scripting (XSS) - Stored
govindpalakkal
High
•$25
Improper Restriction of Rendered UI Layers or Frames
melbinkm
Medium
•$25
Cross-site Scripting (XSS) - Stored
kz-cyber
High
•$25
Cross-site Scripting (XSS) - Stored
mik317
High
•$25