MEDIUM6.5
GHSA-59qh-g7m4-j9m9
Cross-site Scripting in livehelperchat
Quick fix
GHSA-59qh-g7m4-j9m9 — remdex/livehelperchat: upgrade to the fixed version with the command below.
composer require remdex/livehelperchat:^3.93Details
Stored XSS attacks exist in new the form creation flow. New forms can be given a title which will render javascript.
Are you affected?
Enter the version of the package you're using.
Affected packages
Packagist/remdex/livehelperchat
Introduced in:
0Fixed in: 3.93Fix
composer require remdex/livehelperchat:^3.93