CVE-2025-48920

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Drupal etracker allows Cross-Site Scripting XSS.This issue affects etracker: from 0.0.0 before 3.1.0...

CVE-2025-48920

CVE-2025-48920 affects the Drupal etracker module. The issue is an Improper Neutralization of Input During Web Page Generation, i.e., a Cross-Site Scripting (XSS) vulnerability in etracker. Affected versions are 0.0.0 through 3.0.x; the underlying cause is improper input handling in the module’s ...

CVE-2025-48920 etracker - Moderately critical - Cross Site Scripting - SA-CONTRIB-2025-074

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Drupal etracker allows Cross-Site Scripting XSS.This issue affects etracker: from 0.0.0 before 3.1.0...