Vulnerability DRUPAL-CONTRIB-2026-311
Unknown
UNKNOWN RISK
Vulnerabilities without an assigned CVSS score. Severity is not determinable from available data.
4 hours ago
November 04, 2026 at 05:51 PM UTC
No summary available
<1.1.0
<1.1.0
Details
This module integrates the Site Catalyst or AdobeAnalytics software into a Drupal site.
The module does not sufficiently provide access controls for advanced functionality, which exposes a cross-site scripting (XSS) vulnerability.
This vulnerability is mitigated by the fact that an attacker must have permission to add or edit content that is configured to use the module's functionality.
References
Impacted packages
Timeline
Published
4 hours ago
November 04, 2026 at 05:51 PM UTC
Last Modified
1 hour ago
November 04, 2026 at 08:30 PM UTC