7 matches found
POC_CVE-2024-40492
CVE-2024-40492: Stored XSS to ATO Description Stored Cross-Site Scripting XSS is a type of security vulnerability typically found in web applications. It occurs when an attacker is able to inject malicious scripts into a web application, and those scripts are stored on the server. When other user...
CVE-2024-40492
Cross Site Scripting vulnerability in Heartbeat Chat v.15.2.1 allows a remote attacker to execute arbitrary code via the setname function...
CVE-2024-40492
Cross Site Scripting vulnerability in Heartbeat Chat v.15.2.1 allows a remote attacker to execute arbitrary code via the setname function...
CVE-2024-40492
Cross Site Scripting vulnerability in Heartbeat Chat v.15.2.1 allows a remote attacker to execute arbitrary code via the setname function...
CVE-2024-40492
Heartbeat Chat, v15.2.1, is affected by CVE-2024-40492 through a Cross Site Scripting flaw in the setname function. The vulnerability allows a remote attacker to execute arbitrary code in the context of the user’s browser, with network access and user interaction required. Severity is HIGH (CVSS ...
PT-2024-28875 · Unknown · Heartbeat Chat
Name of the Vulnerable Software and Affected Versions: Heartbeat Chat version 15.2.1 Description: A Cross Site Scripting issue allows a remote attacker to execute arbitrary code via the setname function. This enables the attacker to perform unauthorized actions on the affected system...
