What is GHSA-9hgc-wpc5-v8p9?

GHSA-9hgc-wpc5-v8p9 is a security advisory published by GitHub Security Advisories with Medium severity. An attacker can execute malicious javascript in Live Helper Chat

Which CVE IDs does GHSA-9hgc-wpc5-v8p9 cover?

GHSA-9hgc-wpc5-v8p9 covers the following CVE IDs: CVE-2022-1530. Each CVE has its own detail page on EchelonGraph Pulse with the synthesized EG score.

What is the CVSS v3 score of GHSA-9hgc-wpc5-v8p9?

GHSA-9hgc-wpc5-v8p9 has a CVSS v3 base score of 6.1, published by GitHub Security Advisories.

Which products are affected by GHSA-9hgc-wpc5-v8p9?

GHSA-9hgc-wpc5-v8p9 affects 1 product, including: composer/remdex/livehelperchat:\u003c 3.99.

GHSA-9hgc-wpc5-v8p9MediumCVSS 6.1

An attacker can execute malicious javascript in Live Helper Chat

Vendor

GitHub Security Advisories

Published

April 30, 2022

Last Modified

January 30, 2023

🔗 CVE IDs covered (1)

CVE-2022-1530 →

📋 Description

Cross-site Scripting (XSS) in GitHub repository livehelperchat/livehelperchat prior to 3.99v. Attacker can execute malicious javascript on application.

🎯 Affected products1

composer/remdex/livehelperchat:< 3.99

🔗 References (4)

https://nvd.nist.gov/vuln/detail/CVE-2022-1530
https://github.com/livehelperchat/livehelperchat/commit/edef7a8387be718d0de2dfd1e722789afb0461bc
https://huntr.dev/bounties/8fd8de01-7e83-4324-9cc8-a97acb9b70d6
https://github.com/advisories/GHSA-9hgc-wpc5-v8p9