Lucene search

K
veracodeVeracode Vulnerability DatabaseVERACODE:34317
HistoryFeb 21, 2022 - 7:29 a.m.

Cross-site Scripting (XSS)

2022-02-2107:29:01
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
8

0.001 Low

EPSS

Percentile

21.6%

remdex/livehelperchat is vulnerable to cross-site scripting. The library has stored XSS at customer_company_nameValueParam field in the Chat configuration page allowing an attacker to inject and execute malicious javascript on user’s browser, resulting in compromised user accounts.

0.001 Low

EPSS

Percentile

21.6%