~ / search / GHSA-x3g3-jh26-76cf

GHSA-x3g3-jh26-76cf

Cross-site Scripting in livehelperchat

Source: GitHub Advisory Database (reviewed) Moderate CVE-2022-0375

Packages

EcosystemPackageAffectedFixed in
Packagist remdex/livehelperchat < 3.93 3.93

Details

As written in the advisory (Markdown source, shown as plain text).

LiveHelperChat is vulnerable to Stored XSS at the Name field in the Admin themes of System configuration.

References

External links from the advisory. They lead to third-party sites.