CNNVD-202506-1780 Information
Jun 13, 2025
cve
CNNVD ID
CNNVD-202506-1780
Related CVE
- CNNVD Published: 2025-06-13
Description (Chinese)
Drupal etracker是Drupal社区的一款网页插件。 Drupal etracker 3.1.0之前版本存在安全漏洞，该漏洞源于输入中和不当，可能导致跨站脚本攻击。
Description (English)
Drupal etracker is a web-page plugin for the Drupal community. There was a security loophole in the pre-Drupal etracker 3.1.0 version, which originated in inappropriate input and could lead to cross-site script attacks.
Hazard Level
High
Vulnerability Type
其他
Affected Vendor
Drupal
Published
2025-06-13
Last Modified
2026-02-24
References
https://www.drupal.org/sa-contrib-2025-074 https://vigilance.fr/vulnerability/Drupal-etracker-Cross-Site-Scripting-dated-29-05-2025-47297
Patch
https://www.drupal.org/project/etracker/releases/8.x-3.1
Share on: