| Package | Affected versions | Patched versions |
|---|---|---|
| remdex/livehelperchat | < 3.92 | 3.92 |
| live helper chat | < 2.0 | 2.0 |
A CSRF issue is found in the audit configuration under settings. It was found that no CSRF token validation is getting done on the server-side. If we remove the CSRF token and keep the CSRF token field empty, the action is getting performed.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free