En resumen
- CVE-2024-27516 es una vulnerabilidad CRÍTICO (CVSS 9.8) que afecta a remdex/livehelperchat, live helper chat (livehelperchat).
- Probabilidad de explotación en los próximos 30 días (EPSS): 1.5%, mayor que el 73.8% de las vulnerabilidades.
- Solución: actualizar a 4.29, 4.34 o posterior.
Description
Server-Side Template Injection (SSTI) vulnerability in livehelperchat before 4.34, allows remote attackers to execute arbitrary code and obtain sensitive information via the search parameter in lhc_web/modules/lhfaq/faqweight.php.
NVD description
Server-Side Template Injection (SSTI) vulnerability in livehelperchat before 4.34v, allows remote attackers to execute arbitrary code and obtain sensitive information via the search parameter in lhc_web/modules/lhfaq/faqweight.php.
Más vulnerabilidades de remdex/livehelperchat
Ver todo →Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free