CVE-2025-48920

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Drupal etracker allows Cross-Site Scripting XSS.This issue affects etracker: from 0.0.0 before 3.1.0...

CVE-2025-48920

The Drupal etracker web plugin (a tracking system) is vulnerable to Cross-Site Scripting (XSS) due to improper input neutralization. Specifically, the cookies_etracker submodule allows inline JavaScript to be included in consent management without adequately verifying if the code originates from ...

CVE-2025-48920 etracker - Moderately critical - Cross Site Scripting - SA-CONTRIB-2025-074

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Drupal etracker allows Cross-Site Scripting XSS.This issue affects etracker: from 0.0.0 before 3.1.0...