https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Fri, 16 Oct 2026 07:56:45 +0000 https://cve.radiocsirt.org/vuln/drupal-contrib-2025-074 <p><strong>Affected:</strong> Packagist:https://packages.drupal.org/8: drupal/etracker</p> <p>The module adds the etracker web statistics tracking system to your website.</p> <p>The cookies\_etracker submodule allows the inline JavaScript to be included in consent management. However, this does not adequately check whether the provided JavaScript code originates from authorized users.</p> <p>A potential attacker would at least need permission to create and publish HTML (e.g. content or comments).</p> <p><strong>Affected:</strong> Packagist:https://packages.drupal.org/8: drupal/etracker</p> <p>The module adds the etracker web statistics tracking system to your website.</p> <p>The cookies\_etracker submodule allows the inline JavaScript to be included in consent management. However, this does not adequately check whether the provided JavaScript code originates from authorized users.</p> <p>A potential attacker would at least need permission to create and publish HTML (e.g. content or comments).</p> https://cve.radiocsirt.org/vuln/drupal-contrib-2025-074 https://cve.radiocsirt.org/vuln/euvd-2026-244274 EUVD-2026-244274 https://cve.radiocsirt.org/vuln/euvd-2026-244274 https://cve.radiocsirt.org/vuln/fkie_cve-2025-48920 <p>Improper Neutralization of Input During Web Page Generation (&#39;Cross-site Scripting&#39;) vulnerability in Drupal etracker allows Cross-Site Scripting (XSS).This issue affects etracker: from 0.0.0 before 3.1.0.</p> <p>Improper Neutralization of Input During Web Page Generation (&#39;Cross-site Scripting&#39;) vulnerability in Drupal etracker allows Cross-Site Scripting (XSS).This issue affects etracker: from 0.0.0 before 3.1.0.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2025-48920 https://cve.radiocsirt.org/vuln/ghsa-hpgq-7xv5-xf25 <p>Improper Neutralization of Input During Web Page Generation (&#39;Cross-site Scripting&#39;) vulnerability in Drupal etracker allows Cross-Site Scripting (XSS).This issue affects etracker: from 0.0.0 before 3.1.0.</p> <p>Improper Neutralization of Input During Web Page Generation (&#39;Cross-site Scripting&#39;) vulnerability in Drupal etracker allows Cross-Site Scripting (XSS).This issue affects etracker: from 0.0.0 before 3.1.0.</p> https://cve.radiocsirt.org/vuln/ghsa-hpgq-7xv5-xf25 https://cve.radiocsirt.org/vuln/wid-sec-w-2025-1172 <p>Ein Angreifer kann mehrere Schwachstellen in Drupal ausnutzen, um einen Cross-Site Scripting Angriff durchzuführen oder Sicherheitsvorkehrungen zu umgehen.</p> <p>Ein Angreifer kann mehrere Schwachstellen in Drupal ausnutzen, um einen Cross-Site Scripting Angriff durchzuführen oder Sicherheitsvorkehrungen zu umgehen.</p> https://cve.radiocsirt.org/vuln/wid-sec-w-2025-1172