3 matches found
GHSA-8WCC-F2VQ-H4GX Cross-site Scripting in livehelperchat
Stored XSS is found in SettingsLive help configurationPersonal Themestatic content. Under the NAME field put a payload constructor.constructor'alert1' while creating content, and you will see that the input gets stored, and every time the user visits, the payload gets executed...
5.4CVSS5.1AI score0.00766EPSS
SaveExploits1References4
20