Ecosyste.ms: Advisories

Security Advisories: GSA_kwCzR0hTQS1oMmZqLTc3d2gtZmg1d80s0A

Cross-site Scripting in livehelperchat

Cross-site Scripting (XSS) - Stored in Packagist remdex/livehelperchat prior to 3.93v.

Permalink: https://github.com/advisories/GHSA-h2fj-77wh-fh5w
JSON: https://advisories.ecosyste.ms/api/v1/advisories/GSA_kwCzR0hTQS1oMmZqLTc3d2gtZmg1d80s0A
Source: GitHub Advisory Database
Origin: Unspecified
Severity: Moderate
Classification: General
Published: almost 3 years ago
Updated: almost 2 years ago

CVSS Score: 6.7
CVSS vector: CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:L

Identifiers: GHSA-h2fj-77wh-fh5w, CVE-2022-0612
References:

• https://nvd.nist.gov/vuln/detail/CVE-2022-0612
• https://github.com/livehelperchat/livehelperchat/commit/4d4f1db1701f09177896a38e43fd0c693835f03b
• https://huntr.dev/bounties/eadcf7d2-a479-4901-abcc-1505d3f1b32f
• https://github.com/advisories/GHSA-h2fj-77wh-fh5w

Repository: https://github.com/livehelperchat/livehelperchat
Blast Radius: 4.7

Affected Packages