CVE-2022-0612 - Cross-site Scripting (XSS) - Stored in livehelperchat/livehelperchat

MEDIUM

Cross-site Scripting (XSS) - Stored in livehelperchat/livehelperchat

Published Feb 16, 2022

5.4

MEDIUM

CVSS 3.1

EPSS 0.61%

Cross-site Scripting (XSS) - Stored in Packagist remdex/livehelperchat prior to 3.93v.

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor

Product

Default status

Versions

n/a

Version	Status	Constraints
unspecified	affected	<3.93v

No remediation recorded yet.

Weaknesses (1)

CWE-79

Cross-site Scripting (XSS)

Link	Providers	Tags
https://euvd.enisa.europa.eu/vulnerability/EUVD-2022-1029		Advisory
https://github.com/advisories/GHSA-h2fj-77wh-fh5w		Advisory
https://github.com/livehelperchat/livehelperchat/commit/4d4f1db1701f09177896a38e43fd0c693835f03b		x_refsource_MISCPatchThird Party Advisory
https://huntr.dev/bounties/eadcf7d2-a479-4901-abcc-1505d3f1b32f		x_refsource_CONFIRMExploitIssue TrackingPatchThird Party Advisory
https://nvd.nist.gov/vuln/detail/CVE-2022-0612