~ / search / GHSA-5cmw-fhq9-8fhh

GHSA-5cmw-fhq9-8fhh

Type Confusion in LiveHelperChat

Source: GitHub Advisory Database (reviewed) High CVE-2022-1176

Packages

EcosystemPackageAffectedFixed in
Packagist remdex/livehelperchat < 3.96 3.96

Details

As written in the advisory (Markdown source, shown as plain text).

Live Helper Chat provides live support for your website. Loose comparison causes IDOR on multiple endpoints in LiveHelperChat prior to 3.96. There is a fix released in versions 3.96 and 3.97. Currently, there is no known workaround.

References

External links from the advisory. They lead to third-party sites.