1 matches found
ComScore direct tag - Less critical - Cross site scripting - SA-CONTRIB-2017-095
This module enables you to use the comScore Direct analytics system on a site. The module doesn't sufficiently sanitize one of the configuration variables prior to rendering it. This vulnerability is mitigated by the fact that an attacker must have a role with the permission "Administer comScore...
6.9AI score
SaveExploits0References4
20