Yandex Metrics
1 CVEs
product
Monthly
Cross-site scripting (XSS) vulnerability in the Yandex.Metrics module 6.x-1.x before 6.x-1.6 and 7.x-1.x before 7.x-1.5 for Drupal allows remote attackers to inject arbitrary web script or HTML via. Rated medium severity (CVSS 4.3), this vulnerability is remotely exploitable.
XSS
Yandex Metrics
NVD
CVSS 2.0
4.3
EPSS
0.5%
EPSS 0%
CVSS 4.3
MEDIUM
PATCH
This Month
Cross-site scripting (XSS) vulnerability in the Yandex.Metrics module 6.x-1.x before 6.x-1.6 and 7.x-1.x before 7.x-1.5 for Drupal allows remote attackers to inject arbitrary web script or HTML via. Rated medium severity (CVSS 4.3), this vulnerability is remotely exploitable.
XSS
Yandex Metrics
NVD