CVE-2015-4362

The CVE-2015-4362 vulnerability affects the Drupal Tracking Code module (7.x-1.x) prior to 7.x-1.6. It is a CSRF flaw in tracking_code.admin.inc that could allow an attacker to hijack an administrator’s session to disable tracking codes. The fixed version is 7.x-1.6. If using this module on Drupa...