{"action":"Upgrade remdex/livehelperchat to 3.91 or later.","affected":[{"fixed":"3.91","introduced":"0"}],"component":"remdex/livehelperchat","cve_ids":["CVE-2021-4131"],"ecosystem":"Packagist","epss":0.00557,"exploited":false,"fixed_versions":["3.91"],"ghsa_id":"GHSA-hx77-5p88-f92r","id":"tcs_01M5KF40R6H1QTZYGYE8FMYYT0","modified_at":"2023-12-06T01:01:35.966137Z","published_at":"2022-01-05T20:33:55Z","references":["https://osv.dev/vulnerability/GHSA-hx77-5p88-f92r","https://nvd.nist.gov/vuln/detail/CVE-2021-4131","https://github.com/livehelperchat/livehelperchat/commit/3b5d0a8a43595a7f05f2a81b76623a8d7e5ad19f","https://github.com/livehelperchat/livehelperchat","https://huntr.dev/bounties/52dfac87-4fd3-4dfb-83d2-d39916764d43"],"severity":{"label":"high","score":8.8},"sources":[{"source":"osv","source_id":"GHSA-hx77-5p88-f92r","url":"https://osv.dev/vulnerability/GHSA-hx77-5p88-f92r"}],"summary":"livehelperchat is vulnerable to Cross-Site Request Forgery (CSRF)"}