CVE-2014-4513: Activehelper Livehelp Live Chat

Medium severity, CVSS 4.3. EPSS: 4.6% chance of exploitation in the next 30 days.

Multiple cross-site scripting (XSS) vulnerabilities in server/offline.php in the ActiveHelper LiveHelp Live Chat plugin 3.1.0 and earlier for WordPress allow remote attackers to inject arbitrary web script or HTML via the (1) MESSAGE, (2) EMAIL, or (3) NAME parameter.

Affected products

• Activehelper Activehelper Livehelp Live Chat: up to and including 3.1.0; version 2.6.0 only; version 2.6.1 only; version 2.6.2 only; version 2.6.5 only; version 2.6.7 only; …

Published 2014-07-01. Last modified 2026-06-17.