Vulnerability DRUPAL-CONTRIB-2026-311

Unknown
UNKNOWN RISK
Vulnerabilities without an assigned CVSS score. Severity is not determinable from available data.
4 hours ago
November 04, 2026 at 05:51 PM UTC
No summary available
<1.1.0
<1.1.0

Details

This module integrates the Site Catalyst or AdobeAnalytics software into a Drupal site.

The module does not sufficiently provide access controls for advanced functionality, which exposes a cross-site scripting (XSS) vulnerability.

This vulnerability is mitigated by the fact that an attacker must have permission to add or edit content that is configured to use the module's functionality.

Impacted packages

Timeline

Published
4 hours ago
November 04, 2026 at 05:51 PM UTC
Last Modified
1 hour ago
November 04, 2026 at 08:30 PM UTC