Most recent entries from all

bdu:2025-00394

DRUPAL-CONTRIB-2024-016

Affected: Packagist:https://packages.drupal.org/8: drupal/tacjs

This module enables sites to comply with the European cookie law using tarteaucitron.js.

The module doesn't sufficiently filter user-supplied markup inside of content leading to a persistent Cross Site Scripting (XSS) vulnerability. More details are available in [CVE-2023-3620](https://nvd.nist.gov/vuln/detail/CVE-2023-3620).

This vulnerability is mitigated by the fact that an attacker needs to be able to write content in the page, a feature commonly available on Drupal sites.

EUVD-2026-209920

fkie_cve-2024-13252

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Drupal TacJS allows Cross-Site Scripting (XSS).This issue affects TacJS: from 0.0.0 before 6.5.0.

GHSA-f8q3-gfv7-h449

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Drupal TacJS allows Cross-Site Scripting (XSS).This issue affects TacJS: from 0.0.0 before 6.5.0.

WID-SEC-W-2024-0739 — Drupal: Schwachstelle ermöglicht Cross-Site Scripting

Ein authentisierter Angreifer kann eine Schwachstelle in Drupal ausnutzen, um einen Cross-Site Scripting Angriff durchzuführen.