Project: 
AdobeAnalytics
Project machine name: 
adobe_analytics
Date: 
2026-November-04
Security risk: 
Moderately critical 13 ∕ 25 AC:Basic/A:User/CI:Some/II:Some/E:Theoretical/TD:Default
Vulnerability: 
Cross-site scripting
Affected versions: 
<1.1.0
CVE IDs: 
CVE-2026-122083
Description: 

This module integrates the Site Catalyst or AdobeAnalytics software into a Drupal site.

The module does not sufficiently provide access controls for advanced functionality, which exposes a cross-site scripting (XSS) vulnerability.

This vulnerability is mitigated by the fact that an attacker must have permission to add or edit content that is configured to use the module's functionality.

Solution: 

Install the latest version:

Reported By: 
Fixed By: 
Coordinated By: