Drupal Google Tag Cross-Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Drupal Google Tag allows Cross-Site Scripting XSS. This issue affects Google Tag: from 0.0.0 before 1.8.0, from 2.0.0 before 2.0.8...

Drupal Google Tag Cross-Site Request Forgery (CSRF)

Cross-Site Request Forgery CSRF vulnerability in Drupal Google Tag allows Cross Site Request Forgery. This issue affects Google Tag: from 0.0.0 before 1.8.0, from 2.0.0 before 2.0.8...

GHSA-36VV-Q5JV-94CJ Drupal Google Tag Cross-Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Drupal Google Tag allows Cross-Site Scripting XSS. This issue affects Google Tag: from 0.0.0 before 1.8.0, from 2.0.0 before 2.0.8...

GHSA-QCHR-8M24-7V66 Drupal Google Tag Cross-Site Request Forgery (CSRF)

Cross-Site Request Forgery CSRF vulnerability in Drupal Google Tag allows Cross Site Request Forgery. This issue affects Google Tag: from 0.0.0 before 1.8.0, from 2.0.0 before 2.0.8...

CVE-2025-31682

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Drupal Google Tag allows Cross-Site Scripting XSS.This issue affects Google Tag: from 0.0.0 before 1.8.0, from 2.0.0 before 2.0.8...

CVE-2025-31683 Google Tag - Moderately critical - Cross Site Request Forgery - SA-CONTRIB-2025-012

Cross-Site Request Forgery CSRF vulnerability in Drupal Google Tag allows Cross Site Request Forgery.This issue affects Google Tag: from 0.0.0 before 1.8.0, from 2.0.0 before 2.0.8...

CVE-2025-31683

The Drupal Google Tag module is vulnerable to Cross-Site Request Forgery (CSRF) due to insufficient validation when enabling or disabling tag containers. The affected routes lack proper CSRF protection, potentially allowing an attacker to perform unauthorized actions on behalf of a user. While th...

CVE-2025-31682

The Drupal Google Tag module is vulnerable to a Cross-Site Scripting (XSS) vulnerability due to improper neutralization of user-supplied input during web page generation. This allows an attacker to inject and execute malicious scripts in a victim's browser via crafted input. The issue affects ver...

CVE-2025-31682 Google Tag - Moderately critical - Cross Site Scripting - SA-CONTRIB-2025-011

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Drupal Google Tag allows Cross-Site Scripting XSS.This issue affects Google Tag: from 0.0.0 before 1.8.0, from 2.0.0 before 2.0.8...

CVE-2025-31682 Google Tag - Moderately critical - Cross Site Scripting - SA-CONTRIB-2025-011

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Drupal Google Tag allows Cross-Site Scripting XSS.This issue affects Google Tag: from 0.0.0 before 1.8.0, from 2.0.0 before 2.0.8...

CVE-2025-31683: Cross-Site Request Forgery (CSRF)

Cross-Site Request Forgery CSRF vulnerability in Drupal Google Tag allows Cross Site Request Forgery.This issue affects Google Tag: from 0.0.0 before 1.8.0, from 2.0.0 before 2.0.8...

PT-2025-13847 · Drupal · Drupal Google Tag

Name of the Vulnerable Software and Affected Versions: Drupal Google Tag versions 0.0.0 through 1.7.x Drupal Google Tag versions 2.0.0 through 2.0.7 Description: A Cross-Site Request Forgery CSRF issue affects the Drupal Google Tag module, allowing unauthorized actions to be performed on behalf o...

PT-2025-13846 · Drupal · Drupal Google Tag

Name of the Vulnerable Software and Affected Versions: Drupal Google Tag versions 0.0.0 through 1.7.x Drupal Google Tag versions 2.0.0 through 2.0.7 Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting XSS. This allow...

Drupal Google Tag 跨站脚本漏洞

Drupal Google Tag is a Drupal community module for integrating Google Tag Manager in Drupal sites. A cross-site scripting vulnerability exists in Drupal Google Tag versions prior to 1.8.0 and versions prior to 2.0.0 through 2.0.8, which stems from improper input neutralization and could lead to...

CVE-2025-31682: Improper Neutralization of Input During Web Page Generation

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Drupal Google Tag allows Cross-Site Scripting XSS.This issue affects Google Tag: from 0.0.0 before 1.8.0, from 2.0.0 before 2.0.8...