{"id":"CVE-2021-4050","aliases":["BIT-livehelperchat-2021-4050","GHSA-97cc-825c-399g"],"url":"https://o3.security/vulnerability/CVE-2021-4050","summary":"Cross site scripting in remdex/livehelperchat","details":"livehelperchat is vulnerable to Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')","published":"2021-12-08T11:15:11.933Z","modified":"2026-07-09T05:44:58.884469Z","cvss":{"score":6.1,"severity":"MEDIUM","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N"},"epss":{"score":0.0085,"percentile":0.54991,"asOf":"2026-08-23"},"cisaKev":null,"exploitsKnown":1,"affectedPackages":[{"ecosystem":"Packagist","name":"remdex/livehelperchat","fixedVersion":null}],"fix":{"url":"https://github.com/livehelperchat/livehelperchat/commit/0ce1dd2a13509747c240c8484228a5df8d6e03ec","label":"livehelperchat/livehelperchat@0ce1dd2"},"references":[{"type":"FIX","url":"https://github.com/livehelperchat/livehelperchat/commit/0ce1dd2a13509747c240c8484228a5df8d6e03ec"},{"type":"EVIDENCE","url":"https://huntr.dev/bounties/27eb39d7-7636-4c4b-922c-a2f8fbe1ba05"}],"provenance":{"sources":["OSV.dev","FIRST.org (EPSS)"],"lastVerified":"2026-07-09T05:44:58.884469Z"}}