~ / search / GHSA-59qh-g7m4-j9m9

GHSA-59qh-g7m4-j9m9

Cross-site Scripting in livehelperchat

Source: GitHub Advisory Database (reviewed) Moderate CVE-2022-0374

Packages

EcosystemPackageAffectedFixed in
Packagist remdex/livehelperchat < 3.93 3.93

Details

As written in the advisory (Markdown source, shown as plain text).

Stored XSS attacks exist in new the form creation flow. New forms can be given a title which will render javascript.

References

External links from the advisory. They lead to third-party sites.