GitHub Advisoryadvisory · Packagist

GHSA-v4cp-2q7v-hg9q livehelperchat Server-Side Template Injection

MEDIUM Published 2024-02-29 Modified 2024-03-22 Official page ↗
Aliases
CVE-2024-27516
Ecosystem
Packagist
Packages
remdex/livehelperchat
Severity
Moderate
Reviewed
2024-02-29

Affected packages

• Packagist remdex/livehelperchat: < 4.29 → fixed in 4.29

Description

Server-Side Template Injection (SSTI) vulnerability in livehelperchat before 4.34, allows remote attackers to execute arbitrary code and obtain sensitive information via the search parameter in lhc_web/modules/lhfaq/faqweight.php.

Related

Alias · CVE (1)

  • CVE-2024-27516 Server-Side Template Injection (SSTI) vulnerability in livehelperchat before 4.34v, allows remote attackers to execute arbitrary code and… vulnerability

References