VDB
Sign up
MEDIUM6.5

GHSA-x3g3-jh26-76cf

Cross-site Scripting in livehelperchat

Quick fix

GHSA-x3g3-jh26-76cf — remdex/livehelperchat: upgrade to the fixed version with the command below.

composer require remdex/livehelperchat:^3.93

Details

LiveHelperChat is vulnerable to Stored XSS at the Name field in the Admin themes of System configuration.

Are you affected?

Enter the version of the package you're using.

Affected packages

Packagist/remdex/livehelperchat
Introduced in: 0Fixed in: 3.93
Fixcomposer require remdex/livehelperchat:^3.93

References