CVE-2024-27516

Published: 2024-02-29T01:44Z

Last Modified: 2024-11-21T09:04Z

Source: MITRE CVE List

License: MITRE-CVE-TOS

Server-Side Template Injection (SSTI) vulnerability in livehelperchat before 4.34v, allows remote attackers to execute arbitrary code and obtain sensitive information via the search parameter in lhc_web/modules/lhfaq/faqweight.php. > MITRE Terms of Use apply – see LICENSE‑MITRE.txt