<?xml version="1.0" encoding="UTF-8"?><?xml-stylesheet type="text/xsl" href="../assets/feed.xsl"?><rss version="2.0"><channel><title>PatchTheCVE: livechat</title><link>https://patchthecve.com/</link><description>CVEs with upgrade or downgrade fix steps</description><item><title>CVE-2023-49821: Cross-Site Request Forgery (CSRF) vulnerability in LiveChat LiveChat – WP live chat plugin for WordPress.This </title><link>https://patchthecve.com/cve/CVE-2023-49821.html</link><guid>https://patchthecve.com/cve/CVE-2023-49821.html</guid><pubDate>Wed, 17 Jun 2026 06:36:32 +0000</pubDate><description>MEDIUM 5.4: Cross-Site Request Forgery (CSRF) vulnerability in LiveChat LiveChat – WP live chat plugin for WordPress.This issue affects LiveChat – WP live chat plugin for WordPress: from n/a through 4.5.15.</description></item><item><title>CVE-2022-21830: A blind self XSS vulnerability exists in RocketChat LiveChat &lt;v1.9 that could allow an attacker to trick a vic</title><link>https://patchthecve.com/cve/CVE-2022-21830.html</link><guid>https://patchthecve.com/cve/CVE-2022-21830.html</guid><pubDate>Wed, 17 Jun 2026 04:27:03 +0000</pubDate><description>MEDIUM 6.1: A blind self XSS vulnerability exists in RocketChat LiveChat &lt;v1.9 that could allow an attacker to trick a victim pasting malicious code in their chat instance.</description></item><item><title>CVE-2004-2566: Multiple cross-site scripting (XSS) vulnerabilities in LiveWorld products, possibly including (1) LiveForum, (</title><link>https://patchthecve.com/cve/CVE-2004-2566.html</link><guid>https://patchthecve.com/cve/CVE-2004-2566.html</guid><pubDate>Tue, 16 Jun 2026 22:09:53 +0000</pubDate><description>MEDIUM 4.3: Multiple cross-site scripting (XSS) vulnerabilities in LiveWorld products, possibly including (1) LiveForum, (2) LiveQ&amp;A, (3) LiveChat, and (4) LiveFocusGroup, allow remote attackers to inject arbitrary web script or HTML via the q parameter in (a) search.jsp, (b) findclub!execute.jspa, and (c) sear</description></item></channel></rss>