| Package | Affected versions | Patched versions |
|---|---|---|
| heartbeat | = 6.x-2.3= 6.x-3.2= 6.x-3.3= 6.x-3.x= 6.x-4.0= 6.x-4.1= 6.x-4.2= 6.x-4.3= 6.x-4.4= 6.x-4.5= 6.x-4.6= 6.x-4.7= 6.x-4.8= 6.x-4.x |
Multiple cross-site scripting (XSS) vulnerabilities in the Heartbeat module 6.x before 6.x-4.9 for Drupal allow remote authenticated users to inject arbitrary web script or HTML via unspecified vectors.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free