WordPress WP etracker Plugin <= 1.0.2 is vulnerable to Cross Site Scripting (XSS)

Software WP etracker Type Plugin Vulnerable versions = 1.0.2 Fixed in N/A OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2024-34431 Patch priority Medium CVSS severity Medium 7.1 Developer Claim ownership PSID 761a77f3da5a Credits Hiro Required privilege Unauthenticate...

CVE-2010-1543

Cross-site scripting XSS vulnerability in the eTracker module before 6.x-1.2 for Drupal allows remote attackers to inject arbitrary web script or HTML by appending a crafted string to an arbitrary URL associated with the Drupal site...

Cross site scripting

Cross-site scripting XSS vulnerability in the eTracker module before 6.x-1.2 for Drupal allows remote attackers to inject arbitrary web script or HTML by appending a crafted string to an arbitrary URL associated with the Drupal site...

CVE-2010-1543

The CVE-2010-1543 entry concerns a Cross-site Scripting (XSS) vulnerability in the Drupal eTracker module, prior to version 6.x-1.2. The issue enables an attacker to inject arbitrary web script or HTML by appending a crafted string to an arbitrary URL associated with the Drupal site. The provided...

CVE-2010-1543

Cross-site scripting XSS vulnerability in the eTracker module before 6.x-1.2 for Drupal allows remote attackers to inject arbitrary web script or HTML by appending a crafted string to an arbitrary URL associated with the Drupal site...

SA-CONTRIB-2010-024 - eTracker - Cross Site Scripting

The eTracker module provides integration of a Drupal site with the eTracker web traffic analysis service and takes the current URL as a parameter to track what pages have been visited. The URL from the browser is forwarded to JavaScript in the current page, and because the URL wasn't sanitised, i...