What is CVE-2014-4513?

CVE-2014-4513 is a vulnerability in Activehelper Livehelp Live Chat, classified under Cross-site Scripting. Published 2014-07-01.

Is CVE-2014-4513 known to be exploited?

2 public proof-of-concept repositories are indexed. Not currently listed in the CISA KEV catalog.

XSS in Activehelper Livehelp Live Chat

CVE-2014-4513

Multiple cross-site scripting (XSS) vulnerabilities in server/offline.php in the ActiveHelper LiveHelp Live Chat plugin 3.1.0 and earlier for WordPress allow remote attackers to inject arbitrary web script or HTML via the (1) MESSAGE, (2) EMAIL, or (3) NAME parameter.

Vulnerability class: XSS (Cross-Site Scripting)

EPSS: 0.046 (90.6th percentile) — read the EPSS interpretation.

Affected products

Activehelper Activehelper_livehelp_live_chat — versions 2.6.0, 2.6.1, 2.6.2
N/a — versions n/a

Weakness classification (CWE)

CWE-79 — Cross-site Scripting

Public proof-of-concept exploits

References

cve@mitre.org (Exploit, Patch, x_refsource_MISC)

Frequently asked questions

What is CVE-2014-4513?: CVE-2014-4513 is a vulnerability in Activehelper Livehelp Live Chat, classified under Cross-site Scripting. Published 2014-07-01.
Is CVE-2014-4513 known to be exploited?: 2 public proof-of-concept repositories are indexed. Not currently listed in the CISA KEV catalog.