CVE-2018-10810: Livezilla

Medium severity, CVSS 6.1. EPSS: 0.6% chance of exploitation in the next 30 days.

chat/mobile/index.php in LiveZilla Live Chat 7.0.9.5 and prior is affected by Cross-Site Scripting via the Accept-Language HTTP header.

Affected products

• Livezilla Livezilla: up to and including 7.0.9.5

Published 2018-05-16. Last modified 2026-06-17.