Vulnerabilities (CVE)

Filtered by vendor Livezilla Subscribe
Filtered by product Livezilla
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2019-12962 1 Livezilla 1 Livezilla 2021-04-06 4.3 MEDIUM 6.1 MEDIUM
LiveZilla Server before 8.0.1.1 is vulnerable to XSS in mobile/index.php via the Accept-Language HTTP header.
CVE-2019-12940 1 Livezilla 1 Livezilla 2020-08-24 7.1 HIGH 5.9 MEDIUM
LiveZilla Server before 8.0.1.1 is vulnerable to Denial Of Service (memory consumption) in knowledgebase.php via a large integer value of the depth parameter.
CVE-2019-12964 1 Livezilla 1 Livezilla 2019-06-25 4.3 MEDIUM 6.1 MEDIUM
LiveZilla Server before 8.0.1.1 is vulnerable to XSS in the ticket.php Subject.
CVE-2019-12963 1 Livezilla 1 Livezilla 2019-06-25 4.3 MEDIUM 6.1 MEDIUM
LiveZilla Server before 8.0.1.1 is vulnerable to XSS in the chat.php Create Ticket Action.
CVE-2017-15869 1 Livezilla 1 Livezilla 2019-04-29 4.3 MEDIUM 6.1 MEDIUM
Cross-site scripting (XSS) vulnerability in knowledgebase.php in LiveZilla before 7.0.8.9 allows remote attackers to inject arbitrary web script or HTML via the search-for parameter.
CVE-2018-10810 1 Livezilla 1 Livezilla 2018-06-19 4.3 MEDIUM 6.1 MEDIUM
chat/mobile/index.php in LiveZilla Live Chat 7.0.9.5 and prior is affected by Cross-Site Scripting via the Accept-Language HTTP header.