Description
A blind self XSS vulnerability exists in RocketChat LiveChat <v1.9 that could allow an attacker to trick a victim pasting malicious code in their chat instance.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| — | Rocket.chat Livechat | Fixed in v1.9 | — |
Affected packages
| Ecosystem | Package | Affected | Fixed | Record |
|---|---|---|---|---|
| npm | @rocket.chat/livechat | < 1.9.0 | 1.9.0 | GHSA-hf55-c445-2w97 |