CVE-2026-3529

The Drupal Google Analytics GA4 module (versions before 1.1.14 ) contains a Cross-Site Scripting (XSS) vulnerability due to the improper neutralization of input during web page generation. Specifically, the module fails to sufficiently sanitize custom attributes added to the script tag used to lo...

CVE-2026-3529: Improper Neutralization of Input During Web Page Generation

Improper Neutralization of Input During Web Page Generation "Cross-site Scripting" vulnerability in Drupal Google Analytics GA4 allows Cross-Site Scripting XSS.This issue affects Google Analytics GA4: from 0.0.0 before 1.1.14...