Lucene search

K
cnvdChina National Vulnerability DatabaseCNVD-2022-71405
HistoryApr 08, 2022 - 12:00 a.m.

livehelperchat Cross-Site Scripting Vulnerability (CNVD-2022-71405)

2022-04-0800:00:00
China National Vulnerability Database
www.cnvd.org.cn
6

0.001 Low

EPSS

Percentile

30.2%

livehelperchat is available via livehelperchat, which provides free live support on the website. livehelperchat versions prior to 3.97 are vulnerable to a cross-site scripting vulnerability that originates in the GitHub repository livehelperchat/livehelperchat in livehelperchat An XSS vulnerability exists, which can be exploited to compromise a website, cause damage to a user’s account, and run malicious code on a web page, which can cause damage to a user’s device.

CPENameOperatorVersion
livehelperchat livehelperchatlt3.97

0.001 Low

EPSS

Percentile

30.2%

Related for CNVD-2022-71405