What is GHSA-5r9v-8w62-r26j?

GHSA-5r9v-8w62-r26j is a security advisory published by GitHub Security Advisories with Medium severity. livehelperchat is vulnerable to Cross-site Scripting

Which CVE IDs does GHSA-5r9v-8w62-r26j cover?

GHSA-5r9v-8w62-r26j covers the following CVE IDs: CVE-2022-0253. Each CVE has its own detail page on EchelonGraph Pulse with the synthesized EG score.

What is the CVSS v3 score of GHSA-5r9v-8w62-r26j?

GHSA-5r9v-8w62-r26j has a CVSS v3 base score of 5.4, published by GitHub Security Advisories.

Which products are affected by GHSA-5r9v-8w62-r26j?

GHSA-5r9v-8w62-r26j affects 1 product, including: composer/remdex/livehelperchat:\u003c= 3.91.

GHSA-5r9v-8w62-r26jMediumCVSS 5.4

livehelperchat is vulnerable to Cross-site Scripting

Vendor

GitHub Security Advisories

Published

January 21, 2022

Last Modified

February 3, 2023

🔗 CVE IDs covered (1)

CVE-2022-0253 →

📋 Description

livehelperchat is vulnerable to Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')

🎯 Affected products1

composer/remdex/livehelperchat:<= 3.91

🔗 References (4)

https://nvd.nist.gov/vuln/detail/CVE-2022-0253
https://github.com/livehelperchat/livehelperchat/commit/407d0b1a1fa56fa6f824a19092774f10f4880437
https://huntr.dev/bounties/ac7f7eba-ee0b-4a50-bd89-29fd9b3e8303
https://github.com/advisories/GHSA-5r9v-8w62-r26j