CVE-2024-40492

Cross Site Scripting vulnerability in Heartbeat Chat v.15.2.1 allows a remote attacker to execute arbitrary code via the setname function...

CVE-2024-40492

Cross Site Scripting vulnerability in Heartbeat Chat v.15.2.1 allows a remote attacker to execute arbitrary code via the setname function...

CVE-2024-40492

Heartbeat Chat version 15.2.1 is vulnerable to a Stored Cross-Site Scripting (XSS) vulnerability in the setname function. A remote attacker can inject malicious scripts into the application, which are stored on the server and executed in the browsers of other users who view the affected user's se...