PT-2025-30332 · Meta+1 · Facebook+1
CVSS v3.1
5.4
Medium
| Vector | AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N |
Name of the Vulnerable Software and Affected Versions
Live Helper Chat version 4.60
Description
A stored cross-site scripting (XSS) vulnerability exists in the Facebook registration page. Attackers can execute arbitrary web scripts or HTML by injecting a crafted payload into the
Name parameter.Recommendations
Update to a newer version that contains a fix for this issue. As a temporary workaround, consider sanitizing user input for the
Name parameter on the Facebook registration page.Exploit
Fix
XSS
Found an issue in the description? Have something to add? Feel free to write us 👾
Weakness Enumeration
Related Identifiers
Affected Products
Facebook
Livehelperchat