CVE-2024-8712

The GTM Server Side plugin for WordPress is vulnerable to Reflected Cross-Site Scripting due to the use of addqueryarg without appropriate escaping on the URL in all versions up to, and including, 2.1.19. This makes it possible for unauthenticated attackers to inject arbitrary web scripts in page...

CVE-2024-11338

The PIXNET Plugin plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'gtm' and 'venue' parameters in all versions up to, and including, 2.9.10 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with Subscriber-lev...

CVE-2022-23013

On BIG-IP DNS & GTM version 16.x before 16.1.0, 15.1.x before 15.1.4, 14.1.x before 14.1.4.4, and all versions of 13.1.x, 12.1.x, and 11.6.x, a DOM-based cross-site scripting XSS vulnerability exists in an undisclosed page of the BIG-IP Configuration utility that allows an attacker to execute...

CVE-2025-3736

Vulnerability in Drupal Simple GTM.This issue affects Simple GTM:...

CVE-2025-3736

Vulnerability in Drupal Simple GTM.This issue affects Simple GTM:...

CVE-2025-3736 Simple GTM - Critical - Unsupported - SA-CONTRIB-2025-037

Vulnerability in Drupal Simple GTM.This issue affects Simple GTM:...

CVE-2025-3736 Simple GTM - Critical - Unsupported - SA-CONTRIB-2025-037

Vulnerability in Drupal Simple GTM.This issue affects Simple GTM:...

CVE-2025-3736

Technical details about CVE-2025-3736 are not publicly available in the provided documents. Monitor for updates from Drupal SA-Contrib, vendor advisories, and CVE listings.

PT-2025-16800 · Drupal · Drupal Simple Gtm

Name of the Vulnerable Software and Affected Versions: Drupal Simple GTM affected versions not specified Description: The issue affects Drupal Simple GTM, but specific details about the nature of the problem are not provided. There is no information available about the estimated number of...

Drupal Simple GTM module * - Authenticated Other Vulnerability Type vulnerability

Authenticated Other Vulnerability Type vulnerability discovered by Drupal Security Site in WordPress Module Simple GTM versions...

Drupal Simple GTM 安全漏洞

Drupal Simple GTM is a Drupal module for the Drupal community. A security vulnerability exists in Drupal Simple GTM. No information about this vulnerability is available at this time, so please stay tuned to CNNVD or vendor announcements...

Ubuntu: Security Advisory (USN-7422-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2025-31001

Debug Messages Revealing Unnecessary Information vulnerability in TLA Media GTM Kit gtm-kit allows Retrieve Embedded Sensitive Data.This issue affects GTM Kit: from n/a through = 2.4.0...

CVE-2025-31001

Debug Messages Revealing Unnecessary Information vulnerability in TLA Media GTM Kit gtm-kit allows Retrieve Embedded Sensitive Data.This issue affects GTM Kit: from n/a through = 2.4.0...

CVE-2025-31001 WordPress GTM Kit plugin <= 2.4.0 - Sensitive Data Exposure vulnerability

Debug Messages Revealing Unnecessary Information vulnerability in TLA Media GTM Kit gtm-kit allows Retrieve Embedded Sensitive Data.This issue affects GTM Kit: from n/a through = 2.4.0...

CVE-2025-31001

CVE-2025-31001 affects GTM Kit – Google Tag Manager & GA4 integration (GTM Kit) prior to version 2.4.0. The issue is an unauthenticated exposure of sensitive information via debug messages, as indicated by the vulnerability entry. CVSS v3.1 vectors show Network access, low attack complexity, no p...

CVE-2025-31001 WordPress GTM Kit plugin <= 2.4.0 - Sensitive Data Exposure vulnerability

Debug Messages Revealing Unnecessary Information vulnerability in TLA Media GTM Kit gtm-kit allows Retrieve Embedded Sensitive Data.This issue affects GTM Kit: from n/a through = 2.4.0...

PT-2025-14073 · Unknown · Tla Media Gtm Kit

Name of the Vulnerable Software and Affected Versions: TLA Media GTM Kit versions n/a through 2.3.1 Description: The issue allows retrieval of embedded sensitive data due to debug messages revealing unnecessary information. Recommendations: For versions n/a through 2.3.1, update to a version that...

WordPress GTM Kit plugin <= 2.4.0 - Sensitive Data Exposure vulnerability

Sensitive Data Exposure vulnerability discovered by Psai in WordPress Plugin GTM Kit versions = 2.4.0...

CVE-2024-13289

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Drupal Cookiebot + GTM allows Cross-Site Scripting XSS.This issue affects Cookiebot + GTM: from 0.0.0 before 1.0.18...