An attacker can execute malicious javascript in Live Helper Chat

Description

References

• nvd.nist.gov/vuln/detail/CVE-2022-1530 · ADVISORY
• livehelperchat/livehelperchat commit edef7a8 · WEB
• livehelperchat/livehelperchat · PACKAGE
• huntr.dev/bounties/8fd8de01-7e83-4324-9cc8-a97acb9b70d6 · WEB

Más vulnerabilidades de remdex/livehelperchat

• CVE-2024-27516CRÍTICO 9.8Server-Side Template Injection (SSTI) vulnerability in livehelperchat before 4.34v, allows remote attackers to execute arbitrary code and ob…
• CVE-2022-1235ALTO 8.2Weak secrethash can be brute-forced in GitHub repository livehelperchat/livehelperchat prior to 3.96.
• CVE-2022-1213ALTO 8.1SSRF filter bypass port 80, 433 in GitHub repository livehelperchat/livehelperchat prior to 3.67v. An attacker could make the application pe…
• CVE-2022-1176ALTO 7.5Loose comparison causes IDOR on multiple endpoints in GitHub repository livehelperchat/livehelperchat prior to 3.96.
• CVE-2022-0612MEDIO 5.4Cross-site Scripting (XSS) - Stored in Packagist remdex/livehelperchat prior to 3.93v.