TI-2013-00249 CVE-2013-0319 · GHSA-6wfv-35f7-4956Cross-site scripting (XSS) vulnerability in the Yandex.Metrics module 6.x-1.x before…Priority LOW 23Cross-site scripting (XSS) vulnerability in the Yandex.Metrics module 6.x-1.x before 6.x-1.6 and 7.x-1.x before 7.x-1.5 for Drupal allows remote attackers to inject arbitrary web script or HTML via vectors related to the…CVSS 2.0MEDIUM 4.3· Network · No auth · Interaction — · EPSS 0.01284 · Published 2013-03-27 · No fix listed CWE-79