Lucene search
+L

11 matches found

Github Security Blog
Github Security Blog
•added 2025/10/30 12:31 a.m.•19 views

Drupal Plausible tracking is vulnerable to XSS

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Drupal Plausible tracking allows Cross-Site Scripting XSS. This issue affects Plausible tracking: from 0.0.0 before 1.0.2...

5.9AI score0.00181EPSS
SaveExploits0References3Affected Software1
OSV
OSV
•added 2025/10/30 12:31 a.m.•13 views

GHSA-PR6M-QWRR-MRW9 Drupal Plausible tracking is vulnerable to XSS

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Drupal Plausible tracking allows Cross-Site Scripting XSS. This issue affects Plausible tracking: from 0.0.0 before 1.0.2...

6.1CVSS5.9AI score0.00181EPSS
SaveExploits0References2
EUVD
EUVD
•added 2025/10/30 12:31 a.m.•15 views

EUVD-2025-36879

Drupal Plausible tracking is vulnerable to XSS...

6.1CVSS5.8AI score0.00181EPSS
SaveExploits0References2
NVD
NVD
•added 2025/10/30 12:15 a.m.•17 views

CVE-2025-10927

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Drupal Plausible tracking allows Cross-Site Scripting XSS.This issue affects Plausible tracking: from 0.0.0 before 1.0.2...

6.1CVSS0.00181EPSS
SaveExploits0References1
CNNVD
CNNVD
•added 2025/10/30 12:00 a.m.•12 views

Drupal Plausible tracking 安全漏洞

Drupal Plausible tracking is a data analysis plugin for the Drupal community. A security vulnerability exists in Drupal Plausible tracking versions prior to 1.0.2, which stems from improper input neutralization during page generation and could lead to a cross-site scripting attack...

6.1CVSS5.9AI score0.00181EPSS
SaveExploits0References2
OSV
OSV
•added 2025/10/29 11:13 p.m.•12 views

CVE-2025-10927 Plausible tracking - Moderately critical - Cross Site Scripting - SA-CONTRIB-2025-107

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Drupal Plausible tracking allows Cross-Site Scripting XSS.This issue affects Plausible tracking: from 0.0.0 before 1.0.2...

6.1CVSS5.9AI score
SaveExploits0References5
Vulnrichment
Vulnrichment
•added 2025/10/29 11:13 p.m.•5 views

CVE-2025-10927 Plausible tracking - Moderately critical - Cross Site Scripting - SA-CONTRIB-2025-107

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Drupal Plausible tracking allows Cross-Site Scripting XSS.This issue affects Plausible tracking: from 0.0.0 before 1.0.2...

5.5AI score0.00181EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2025/10/29 11:13 p.m.•24 views

CVE-2025-10927 Plausible tracking - Moderately critical - Cross Site Scripting - SA-CONTRIB-2025-107

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Drupal Plausible tracking allows Cross-Site Scripting XSS.This issue affects Plausible tracking: from 0.0.0 before 1.0.2...

0.00181EPSS
SaveExploits0References1
CVE
CVE
•added 2025/10/29 11:13 p.m.•27 views

CVE-2025-10927

The Drupal Plausible tracking module (versions prior to 1.0.2 ) is vulnerable to Cross-Site Scripting (XSS) due to improper neutralization of input during web page generation. This flaw allows for the execution of malicious scripts within a user's browser context. The vulnerability is mitigated b...

5.5AI score0.00181EPSS
SaveExploits0References1Affected Software1
Positive Technologies
Positive Technologies
•added 2025/10/29 12:00 a.m.•14 views

PT-2025-44355

Name of the Vulnerable Software and Affected Versions Drupal Plausible tracking versions prior to 1.0.2 Description The Plausible tracking component contains a flaw due to improper input neutralization during web page generation, leading to a Cross-Site Scripting XSS issue. This allows for the...

6.1CVSS6AI score0.00181EPSS
SaveExploits0References6
Patchstack
Patchstack
•added 2025/09/24 12:00 a.m.•15 views

Drupal Plausible tracking module < 1.0.2 - Unauthenticated Cross Site Scripting (XSS) vulnerability

Unauthenticated Cross Site Scripting XSS vulnerability discovered by Pierre Rudloff prudloff in WordPress Module Plausible tracking versions 1.0.2...

6.1CVSS6.1AI score0.00181EPSS
SaveExploits0Affected Software1
Rows per page
Query Builder