PT-2024-25885 · WordPress · Wp Etracker

Name of the Vulnerable Software and Affected Versions: WP etracker versions 1.0.2 and earlier Description: The issue is related to improper neutralization of input during web page generation, which can lead to Cross-site Scripting XSS. Specifically, it allows Reflected XSS. Recommendations: For...

WordPress WP etracker plugin <= 1.0.2 - Reflected Cross Site Scripting (XSS) vulnerability

Reflected Cross Site Scripting XSS vulnerability discovered by Hiro Patchstack Alliance in WordPress Plugin WP etracker versions = 1.0.2...

WordPress WP etracker Plugin <= 1.0.2 is vulnerable to Cross Site Scripting (XSS)

Software WP etracker Type Plugin Vulnerable versions = 1.0.2 Fixed in N/A OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2024-34431 Patch priority Medium CVSS severity Medium 7.1 Developer Claim ownership PSID 761a77f3da5a Credits Hiro Required privilege Unauthenticate...

CVE-2010-1543

Cross-site scripting XSS vulnerability in the eTracker module before 6.x-1.2 for Drupal allows remote attackers to inject arbitrary web script or HTML by appending a crafted string to an arbitrary URL associated with the Drupal site...

Cross site scripting

Cross-site scripting XSS vulnerability in the eTracker module before 6.x-1.2 for Drupal allows remote attackers to inject arbitrary web script or HTML by appending a crafted string to an arbitrary URL associated with the Drupal site...

CVE-2010-1543

The CVE-2010-1543 entry concerns a Cross-site Scripting (XSS) vulnerability in the Drupal eTracker module, prior to version 6.x-1.2. The issue enables an attacker to inject arbitrary web script or HTML by appending a crafted string to an arbitrary URL associated with the Drupal site. The provided...

CVE-2010-1543

Cross-site scripting XSS vulnerability in the eTracker module before 6.x-1.2 for Drupal allows remote attackers to inject arbitrary web script or HTML by appending a crafted string to an arbitrary URL associated with the Drupal site...

CVE-2010-1543: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in the eTracker module before 6.x-1.2 for Drupal allows remote attackers to inject arbitrary web script or HTML by appending a crafted string to an arbitrary URL associated with the Drupal site...

SA-CONTRIB-2010-024 - eTracker - Cross Site Scripting

The eTracker module provides integration of a Drupal site with the eTracker web traffic analysis service and takes the current URL as a parameter to track what pages have been visited. The URL from the browser is forwarded to JavaScript in the current page, and because the URL wasn't sanitised, i...