TI-2010-01964 CVE-2010-2048 · GHSA-r6q2-r6w9-r68wMultiple cross-site scripting (XSS) vulnerabilities in the Heartbeat module 6.x before…Priority LOW 18Multiple cross-site scripting (XSS) vulnerabilities in the Heartbeat module 6.x before 6.x-4.9 for Drupal allow remote authenticated users to inject arbitrary web script or HTML via unspecified vectors.CVSS 2.0LOW 3.5· Network · Low privileges · Interaction — · EPSS 0.00868 · Published 2010-05-25 · No fix listed CWE-79