plugin

Activehelper Livehelp Vulnerabilities

1 known security issue reported for the Activehelper Livehelp WordPress plugin. Most recent disclosed May 28, 2014.

1 medium

Running Activehelper Livehelp on your site? Check whether your installed version is affected.

ActiveHelper LiveHelp Live Chat < 3.1.5 - Reflected Cross-Site Scripting

medium

Multiple cross-site scripting (XSS) vulnerabilities in server/offline.php in the ActiveHelper LiveHelp Live Chat plugin 3.1.0 and earlier for WordPress allow remote attackers to inject arbitrary web script or HTML via the (1) MESSAGE, (2) EMAIL, or (3) NAME parameter.

CVSS:: 6.1
Affected:: up to 3.1.5
Fixed in:: 3.1.5
Disclosed:: May 28, 2014

CVE-2014-4513 on NVD →

Protect your WordPress site

Run a free security scan to detect vulnerable plugins and themes, exposed files, and malware — no plugin install, no signup.

Scan your site free

← Back to the vulnerability database