Lucene search
+L

3 matches found

OSV
OSV
added 2022/01/28 11:6 p.m.61 views

GHSA-8WCC-F2VQ-H4GX Cross-site Scripting in livehelperchat

Stored XSS is found in SettingsLive help configurationPersonal Themestatic content. Under the NAME field put a payload constructor.constructor'alert1' while creating content, and you will see that the input gets stored, and every time the user visits, the payload gets executed...

5.4CVSS5.1AI score0.00766EPSS
SaveExploits1References4
Rows per page
Query Builder