Advisories · Technology
PixelYourSite Pro – Your smart PIXEL (TAG) Manager.
Every CVE that names PixelYourSite Pro – Your smart PIXEL (TAG) Manager among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.
- CVSS 5.3 Medium
PixelYourSite <= 11.2.1 - Unauthenticated Sensitive Information Exposure via Order-Received Endpoint Missing Key Validation
- PixelYourSite – Your smart PIXEL (TAG) & API Manager
- PixelYourSite Pro – Your smart PIXEL (TAG) Manager
- Information disclosure
- CVSS 7.2 High
PixelYourSite Pro <= 12.5.0.1 - Unauthenticated Blind Server-Side Request Forgery via 'urls[]' Parameter
- PixelYourSite Pro – Your smart PIXEL (TAG) Manager
- Server-side request forgery (SSRF)
- CVSS 7.2 High
PixelYourSite PRO <= 12.4.0.2 - Unauthenticated Stored Cross-Site Scripting
- PixelYourSite Pro – Your smart PIXEL (TAG) Manager
- Cross-site scripting (XSS)
- CVSS 6.5 Medium
PixelYourSite – Your smart PIXEL (TAG) & API Manager <= 9.7.1 and PixelYourSite PRO <= 10.4.2 - Unauthenticated Information Exposure and Log Deletion
- PixelYourSite – Your smart PIXEL (TAG) & API Manager
- PixelYourSite Pro – Your smart PIXEL (TAG) Manager
- Authentication bypass
- CVSS 4.4 Medium
PixelYourSite <= 9.3.6 and PixelYourSite Pro <= 9.6.1 - Authenticated (Administrator+) Stored Cross-Site Scripting
- PixelYourSite – Your smart PIXEL (TAG) & API Manager
- PixelYourSite Pro – Your smart PIXEL (TAG) Manager
- Cross-site scripting (XSS)