Description
This module integrates the Site Catalyst or AdobeAnalytics software into a Drupal site.
The module does not sufficiently provide access controls for advanced functionality, which exposes a cross-site scripting (XSS) vulnerability.
This vulnerability is mitigated by the fact that an attacker must have permission to add or edit content that is configured to use the module's functionality.
Affected packages
| Ecosystem | Package | Affected | Fixed | Record |
|---|---|---|---|---|
| Packagist | drupal/adobe_analytics | < 1.1.0 | 1.1.0 | DRUPAL-CONTRIB-2026-311 |
Advisories 1
- WID-SEC-2026-4352 Drupal Erweiterungen: Mehrere Schwachstellen BSI CERT-Bund (WID) · Nov 4, 2026