GHSA-6jmh-9gqm-5xrxMediumCVSS 4.3

Cross-Site Request Forgery (CSRF) in livehelperchat

Published
January 26, 2022
Last Modified
February 3, 2023

🔗 CVE IDs covered (1)

CVE-2022-0226 →

📋 Description

A CSRF issue is found in the audit configuration under settings. It was found that no CSRF token validation is getting done on the server-side. If we remove the CSRF token and keep the CSRF token field empty, the action is getting performed.

🎯 Affected products1

  • composer/remdex/livehelperchat:< 3.92

🔗 References (4)