CVE-2020-26135: Livehelperchat Live Helper Chat

Medium severity, CVSS 6.1. EPSS: 1% chance of exploitation in the next 30 days.

Live Helper Chat before 3.44v allows reflected XSS via the setsettingajax PATH_INFO.

Affected products

• Livehelperchat Live Helper Chat: before 3.44 (fixed in 3.44)

Published 2020-10-02. Last modified 2026-06-17.