CVE-2022-0502 Cross-site Scripting (XSS) - Stored in livehelperchat/livehelperchat

2022-02-0610:50:10

CWE-79

@huntrdev

www.cve.org

cve-2022-0502

cross-site scripting

livehelperchat

packagist remdex

3.93v

CVSS3

6.5

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

HIGH

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

NONE

CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:N

EPSS

0.001

Percentile

21.4%

JSON

Cross-site Scripting (XSS) - Stored in Packagist remdex/livehelperchat prior to 3.93v.

CNA Affected

[
  {
    "product": "livehelperchat/livehelperchat",
    "vendor": "livehelperchat",
    "versions": [
      {
        "lessThan": "3.93v",
        "status": "affected",
        "version": "unspecified",
        "versionType": "custom"
      }
    ]
  }
]