high7.1
CVE-2024-40492
Cross Site Scripting vulnerability in Heartbeat Chat v.15.2.1 allows a remote attacker to execute arbitrary code via the setname function.
Impact
Cross Site Scripting vulnerability in Heartbeat Chat v.15.2.1 allows a remote attacker to execute arbitrary code via the setname function.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Heartbeat | Heartbeat | Version 15.2.1 |