Tracking Code Project: Security Vulnerabilities
Cross-site request forgery (CSRF) vulnerability in tracking_code.admin.inc in the Tracking Code module 7.x-1.x before 7.x-1.6 for Drupal allows remote attackers to hijack the authentication of administrators for requests that disable tracking codes via unspecified vectors.
CVSS Score
6.8
EPSS Score
0.003
Published
2015-06-15