Advisories · Technology
PixelYourSite – Your smart PIXEL (TAG) & API Manager.
Every CVE that names PixelYourSite – Your smart PIXEL (TAG) & API Manager among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.
- CVSS 5.3 Medium
PixelYourSite <= 11.2.1 - Unauthenticated Sensitive Information Exposure via Order-Received Endpoint Missing Key Validation
- PixelYourSite – Your smart PIXEL (TAG) & API Manager
- PixelYourSite Pro – Your smart PIXEL (TAG) Manager
- Information disclosure
- CVSS 7.2 High
PixelYourSite <= 11.2.0 - Unauthenticated Stored Cross-Site Scripting
- PixelYourSite – Your smart PIXEL (TAG) & API Manager
- Cross-site scripting (XSS)
- CVSS 5.3 Medium
PixelYourSite <= 11.1.5 - Sensitive Information Exposure via Log File
- PixelYourSite – Your smart PIXEL (TAG) & API Manager
- Information disclosure
- CVSS 4.3 Medium
PixelYourSite <= 11.1.2 – Cross-Site Request Forgery to GDPR Options Modification
- PixelYourSite – Your smart PIXEL (TAG) & API Manager
- Cross-site request forgery (CSRF)
- CVSS 6.5 Medium
PixelYourSite – Your smart PIXEL (TAG) & API Manager <= 9.7.1 and PixelYourSite PRO <= 10.4.2 - Unauthenticated Information Exposure and Log Deletion
- PixelYourSite – Your smart PIXEL (TAG) & API Manager
- PixelYourSite Pro – Your smart PIXEL (TAG) Manager
- Authentication bypass
- CVSS 4.4 Medium
PixelYourSite <= 9.3.6 and PixelYourSite Pro <= 9.6.1 - Authenticated (Administrator+) Stored Cross-Site Scripting
- PixelYourSite – Your smart PIXEL (TAG) & API Manager
- PixelYourSite Pro – Your smart PIXEL (TAG) Manager
- Cross-site scripting (XSS)