{"action":"No fix published. Pin and monitor.","affected":[{"introduced":"0","last_affected":"3.90"}],"component":"remdex/livehelperchat","cve_ids":["CVE-2021-4123"],"ecosystem":"Packagist","epss":0.00506,"exploited":false,"fixed_versions":[],"ghsa_id":"GHSA-rpg7-q4cv-p466","id":"tcs_01M5KF8EHM8S9QKMDX8CBZC3CY","modified_at":"2023-12-06T01:01:35.489809Z","published_at":"2021-12-17T20:00:16Z","references":["https://osv.dev/vulnerability/GHSA-rpg7-q4cv-p466","https://nvd.nist.gov/vuln/detail/CVE-2021-4123","https://github.com/livehelperchat/livehelperchat/commit/2a98c69cf8899afb9a76d737527abb1dd96fa106","https://github.com/livehelperchat/livehelperchat","https://huntr.dev/bounties/52182545-fdd6-4d4f-9fba-25010f7f8cba"],"severity":{"label":"medium","score":6.5},"sources":[{"source":"osv","source_id":"GHSA-rpg7-q4cv-p466","url":"https://osv.dev/vulnerability/GHSA-rpg7-q4cv-p466"}],"summary":"livehelperchat is vulnerable to Cross-Site Request Forgery (CSRF)"}