CVE-2025-48920 – Drupal etracker Cross-Site Scripting (XSS)

June 13, 2025

CVE ID : CVE-2025-48920

Published : June 13, 2025, 4:15 p.m. | 1 hour, 51 minutes ago

Description : Improper Neutralization of Input During Web Page Generation (‘Cross-site Scripting’) vulnerability in Drupal etracker allows Cross-Site Scripting (XSS).This issue affects etracker: from 0.0.0 before 3.1.0.

Severity: 0.0 | NA

Visit the link for more details, such as CVSS details, affected products, timeline, and more…

Source: Read More

Previous ArticleCVE-2025-49580 – XWiki Cross-Site Scripting (XSS) Vulnerability

Next Article CVE-2025-48919 – Drupal Simple Klaro Cross-Site Scripting (XSS)

Highlights

CVE-2025-40672 – ProactivaNet from Grupo Espiral MS Privilege Escalation Vulnerability

May 26, 2025

CVE ID : CVE-2025-40672

Published : May 26, 2025, 10:15 a.m. | 1 hour, 52 minutes ago

Description : A Privilege Escalation vulnerability has been found in ProactivaNet v3.24.0.0 from Grupo Espiral MS. This vulnerability allows any user to override the file panLoad.exe that will be executed by SYSTEM user via a programmed task.
This would allow an attacker to obtain administrator permissions to
perform whatever activities he/she wants, shuch as accessing sensitive
information, executing code remotely, and even causing a denial of
service (DoS).

Severity: 0.0 | NA

Visit the link for more details, such as CVSS details, affected products, timeline, and more…

How To Prevent WordPress SQL Injection Attacks

This week in AI dev tools: Apple’s Foundations Model framework, Mistral’s first reasoning model, and more (June 13, 2025)

Open Talent platforms emerging to match skilled workers to needs, study finds

Java never goes out of style: Celebrating 30 years of the language

6 registry tweaks every tech-savvy user must apply on Windows 11

Here’s why network infrastructure is vital to maximizing your company’s AI adoption

The AI video tool behind the most viral social trends right now

Got a new password manager? How to clean up the password mess you left in the cloud

Right Invoicing App for iPhone: InvoiceTemple

Right Invoicing App for iPhone: InvoiceTemple

Tunnel Run game in 170 lines of pure JS

Integrating Drupal with Salesforce SSO via SAML and Dynamic User Sync

Windows 11 24H2 tests toggle to turn off Recommended feed in the Start menu

Windows 11 24H2 tests toggle to turn off Recommended feed in the Start menu

User calls Windows 11 “pure horror,” Microsoft says it’s listening to feedback

John the Ripper is an advanced offline password cracker

CVE-2025-48920 – Drupal etracker Cross-Site Scripting (XSS)

HPE Issues Security Patch for StoreOnce Bug Allowing Remote Authentication Bypass

Chaos RAT Malware Targets Windows and Linux via Fake Network Tool Downloads

CVE-2025-43697 – Salesforce OmniStudio DataMapper Permission Preservation Encryption Exposure Vulnerability

This AI Paper from ByteDance Introduces a Hybrid Reward System Combining Reasoning Task Verifiers (RTV) and a Generative Reward Model (GenRM) to Mitigate Reward Hacking

CVE-2023-53122 – RISC-V SiFive Errata Patching Mutex Vulnerability

You’re a business

CVE-2025-40672 – ProactivaNet from Grupo Espiral MS Privilege Escalation Vulnerability

How to Create a JSON Web Token in the Django Rest Framework

Mozilla annuncia la chiusura di Fakespot: addio allo strumento contro le recensioni false

Hacked routers used for paid DDoS attacks

CVE-2025-48920 – Drupal etracker Cross-Site Scripting (XSS)

Related Posts