Unknown Stape Conversion Tracking vulnerabilities

• gtmserver stape conversion tracking Stape Conversion Tracking 2.3.0 - 2.3.10 - Unauthenticated SSRF and Same-Origin XSS via Proxy Sub-Path CVE-2026-118422 7.1 HighNovember 4, 2026