CVE-2024-27516

Server-Side Template Injection SSTI vulnerability in livehelperchat before 4.34v, allows remote attackers to execute arbitrary code and obtain sensitive information via the search parameter in lhcweb/modules/lhfaq/faqweight.php...

CVE-2024-27516

Server-Side Template Injection SSTI vulnerability in livehelperchat before 4.34v, allows remote attackers to execute arbitrary code and obtain sensitive information via the search parameter in lhcweb/modules/lhfaq/faqweight.php...

CVE-2024-27516

A Server-Side Template Injection (SSTI) vulnerability exists in livehelperchat versions prior to 4.34 . Remote attackers can exploit the search parameter in the lhc_web/modules/lhfaq/faqweight.php file to execute arbitrary code and obtain sensitive information. To remediate this issue, users shou...