| Package | Affected versions | Patched versions |
|---|---|---|
| drupal/adobe_analytics | < 1.1.0 | 1.1.0 |
This module integrates the Site Catalyst or AdobeAnalytics software into a Drupal site.
The module does not sufficiently provide access controls for advanced functionality, which exposes a cross-site scripting (XSS) vulnerability.
This vulnerability is mitigated by the fact that an attacker must have permission to add or edit content that is configured to use the module's functionality.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free