https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-06T20:23:17.918633+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/drupal-contrib-2026-013 DRUPAL-CONTRIB-2026-013 2026-10-06T20:23:18.001629+00:00

Affected: Packagist:https://packages.drupal.org/8: drupal/tagify

This module integrates the Tagify JavaScript library to enhance taxonomy entity reference widgets.

The module does not sufficiently sanitise user-supplied input before rendering it inside JavaScript template strings within the Tagify widget. This allows arbitrary JavaScript execution in the browser when a user creates or edits content.

 https://cve.radiocsirt.org/vuln/euvd-2026-277551 EUVD-2026-277551 2026-10-06T20:23:18.001754+00:00 EUVD-2026-277551 https://cve.radiocsirt.org/vuln/fkie_cve-2026-3212 fkie_cve-2026-3212 2026-10-06T20:23:18.001783+00:00

Improper Neutralization of Input During Web Page Generation ("Cross-site Scripting") vulnerability in Drupal Tagify allows Cross-Site Scripting (XSS).This issue affects Tagify: from 0.0.0 before 1.2.49.

 https://cve.radiocsirt.org/vuln/ghsa-6w89-632c-v958 GHSA-6w89-632c-v958 2026-10-06T20:23:18.001830+00:00

Improper Neutralization of Input During Web Page Generation ("Cross-site Scripting") vulnerability in Drupal Tagify allows Cross-Site Scripting (XSS).This issue affects Tagify: from 0.0.0 before 1.2.49.

 https://cve.radiocsirt.org/vuln/wid-sec-w-2026-0530 WID-SEC-W-2026-0530 — Drupal Extensions: Mehrere Schwachstellen 2026-10-06T20:23:18.001864+00:00

Ein entfernter, anonymer oder authentisierter Angreifer kann mehrere Schwachstellen in verschiedenen Drupal Extensions ausnutzen, um Cross-Site-Scripting-Angriffe zu starten, Sicherheitsmaßnahmen zu umgehen, Daten zu manipulieren und vertrauliche Informationen offenzulegen.