Thewhiteevil/CVE-2025-51401

PoC

LiveHelperChat <=4.61 - Stored Cross Site Scripting (XSS) via Operator Chat Name Field Triggers on Chat Owner Transfer

view exploit source poc_in_githubauthor Thewhiteevilpublished 2025-07-20catalog poc_in_github

exploited CVEs (1)

Known CVEs related to this entry.

ID	severity	EPSS	exploitable	published
CVE-2025-51401US	—	0.97% (62nd)	Exploit	2025-07-21
A stored cross-site scripting (XSS) vulnerability in the chat transfer function of Live Helper Chat v4.60 allows attackers to execute arbitrary web scripts or HTML via injecting a…

scry

Working exploits like this target internet-facing systems. See what is exposed on your perimeter with a free passive scan.