CVE-2024-27516
livehelperchat Server-Side Template Injection
EPSS 3.2%
Description
Server-Side Template Injection (SSTI) vulnerability in livehelperchat before 4.34, allows remote attackers to execute arbitrary code and obtain sensitive information via the search parameter in lhc_web/modules/lhfaq/faqweight.php.
How to fix CVE-2024-27516
To remediate CVE-2024-27516, upgrade the affected package to a fixed version below.
- Packagist/remdex/livehelperchat—upgrade to 4.29 or later
Is CVE-2024-27516 being exploited?
Low — EPSS is 3.2%, meaning exploitation activity has not been observed at scale.
Affected packages (1)
- from 0, < 4.29