https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-07T15:32:46.108279+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/drupal-contrib-2025-094 DRUPAL-CONTRIB-2025-094 2026-10-07T15:32:46.111453+00:00

Affected: Packagist:https://packages.drupal.org/8: drupal/gtm

This module enables you to integrate Google Tag Manager (GTM) into your Drupal site by allowing administrators to configure and embed GTM container snippets.

The module doesn't sufficiently sanitize the GTM container ID under the scenario where a user with the *Administer gtm* permission enters malicious input into the *GTM-ID* field. This value is directly inserted into a `<script>` tag, making the site vulnerable to Cross-site Scripting (XSS) attacks.

This vulnerability is mitigated by the fact that an attacker must have a role with the permission *Administer gtm*, and the input field is limited to 20 characters.

 https://cve.radiocsirt.org/vuln/euvd-2026-249983 EUVD-2026-249983 2026-10-07T15:32:46.111504+00:00 EUVD-2026-249983 https://cve.radiocsirt.org/vuln/fkie_cve-2025-8362 fkie_cve-2025-8362 2026-10-07T15:32:46.111520+00:00

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Drupal GoogleTag Manager allows Cross-Site Scripting (XSS).This issue affects GoogleTag Manager: from 0.0.0 before 1.10.0.

 https://cve.radiocsirt.org/vuln/ghsa-3hjr-7c64-7xm6 GHSA-3hjr-7c64-7xm6 2026-10-07T15:32:46.111543+00:00

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Drupal GoogleTag Manager allows Cross-Site Scripting (XSS).This issue affects GoogleTag Manager: from 0.0.0 before 1.10.0.

 https://cve.radiocsirt.org/vuln/wid-sec-w-2025-1684 WID-SEC-W-2025-1684 — Drupal: Mehrere Schwachstellen 2026-10-07T15:32:46.111558+00:00

Ein Angreifer kann mehrere Schwachstellen in Drupal ausnutzen, um Sicherheitsmaßnahmen zu umgehen und Cross-Site-Scripting-Angriffe durchzuführen.