Security Advisory
CVE-2010-2048
CVE vulnerability detail - eXtreme Datacenter Security Operations
Description
Multiple cross-site scripting (XSS) vulnerabilities in the Heartbeat module 6.x before 6.x-4.9 for Drupal allow remote authenticated users to inject arbitrary web script or HTML via unspecified vectors.