CVE-2025-4415

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Drupal Piwik PRO allows Cross-Site Scripting XSS.This issue affects Piwik PRO: from 0.0.0 before 1.3.2...

CVE-2024-13298

The Drupal Tarte au Citron module (versions 2.0.0 to 2.0.4 ) is vulnerable to Cross-Site Scripting (XSS) due to improper input neutralization during web page generation. A malicious actor can exploit this to perform XSS attacks remotely, potentially leading to malicious JavaScript insertion or pa...

CVE-2024-13252 TacJS - Moderately critical - Cross Site Scripting - SA-CONTRIB-2024-016

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Drupal TacJS allows Cross-Site Scripting XSS.This issue affects TacJS: from 0.0.0 before 6.5.0...