The Google Analytics module has a moderately critical cross-site scripting vulnerability.

With the help of the D6LTS vendors, a new version was released:

https://www.drupal.org/project/google_analytics/releases/6.x-4.3

As well as patches for the 6.x-3.x and 6.x-2.x branches.

CommentFileSizeAuthor
SA-CONTRIB-2016-042-6.x-2.x.patch2.75 KBdsnopek
SA-CONTRIB-2016-042-6.x-3.x.patch2.78 KBdsnopek
SA-CONTRIB-2016-042-6.x-4.x.patch2.81 KBdsnopek
Support from Acquia helps fund testing for Drupal Acquia logo

Comments

dsnopek created an issue. See original summary.

dsnopek’s picture

dsnopek
he/him
Primary language English
Location USA
CreditAttribution: dsnopek commented
Status: Needs review » Fixed

Committed to repo!

Status: Fixed » Closed (fixed)

Automatically closed - issue fixed for 2 weeks with no activity.