Drupal Plausible tracking versions before 1.0.2 contain a Cross-Site Scripting (XSS) vulnerability due to improper neutralization of input during web page generation. This vulnerability allows attackers to inject malicious scripts that can execute in the context of the affected web application. The issue is fixed in version 1.0.2.