CVE-2022-0253

Description

livehelperchat is vulnerable to Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')

How to fix CVE-2022-0253

No fixed version has been published yet. Mitigate by removing the affected package or applying upstream guidance from the references below.

• Packagist/remdex/livehelperchat—no fix listed

Is CVE-2022-0253 being exploited?

Low — EPSS is 0.3%, meaning exploitation activity has not been observed at scale.

Affected packages (1)

• from 0, <= 3.91

CVSS scores

References (4)

• ADVISORYnvd.nist.gov/vuln/detail/CVE-2022-0253
• PATCHgithub.com/livehelperchat/livehelperchat
• WEBgithub.com/livehelperchat/livehelperchat/commit/407d0b1a1fa56fa6f824a19092774f10f4880437
• WEBhuntr.dev/bounties/ac7f7eba-ee0b-4a50-bd89-29fd9b3e8303