PT-2022-13933 · Unknown · Livehelperchat

Published 2022-04-29 · Updated 2024-03-06 · CVE-2022-1530

Positive Technologies (AI Summary)

CVSS v2.0

4.3

Medium

Base vector

AV:N/AC:M/Au:N/C:N/I:P/A:N

Name of the Vulnerable Software and Affected Versions livehelperchat/livehelperchat versions prior to 3.99v

Description The issue is related to Cross-site Scripting (XSS), which allows an attacker to execute malicious JavaScript on the application. This can potentially lead to unauthorized actions being taken on the affected system.

Recommendations For versions prior to 3.99v, update to version 3.99v or later to resolve the issue. As a temporary workaround, consider restricting access to sensitive areas of the application to minimize the risk of exploitation.

Exploit

Fix

XSS

Weakness Enumeration

CWE-79

Related Identifiers

BIT-LIVEHELPERCHAT-2022-1530

CVE-2022-1530

GHSA-9HGC-WPC5-V8P9

Affected Products

Livehelperchat

References · 9

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2022/1xxx/CVE-2022-1530.json · Exploit
• 🔥 https://huntr.dev/bounties/8fd8de01-7e83-4324-9cc8-a97acb9b70d6 · Exploit
• https://github.com/livehelperchat/livehelperchat/commit/edef7a8387be718d0de2dfd1e722789afb0461bc · Patch
• https://nvd.nist.gov/vuln/detail/CVE-2022-1530 · Security Note
• https://osv.dev/vulnerability/BIT-livehelperchat-2022-1530 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2022-1530 · Vendor Advisory
• https://osv.dev/vulnerability/GHSA-9hgc-wpc5-v8p9 · Vendor Advisory
• https://github.com/livehelperchat/livehelperchat · Note
• https://t.me/cibsecurity/41620 · Telegram Post