CVE-2025-8362 GoogleTag Manager - Moderately critical - Cross-site scripting - SA-CONTRIB-2025-094

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Drupal GoogleTag Manager allows Cross-Site Scripting XSS.This issue affects GoogleTag Manager: from 0.0.0 before 1.10.0...

CVE-2025-8362 GoogleTag Manager - Moderately critical - Cross-site scripting - SA-CONTRIB-2025-094

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Drupal GoogleTag Manager allows Cross-Site Scripting XSS.This issue affects GoogleTag Manager: from 0.0.0 before 1.10.0...

CVE-2025-5844

CVE-2025-5844 affects Radius Blocks – WordPress Gutenberg Blocks (<= 2.2.1). The issue is a Stored Cross-Site Scripting vulnerability caused by insufficient input sanitization and output escaping in the subHeadingTagName parameter. Exploitation requires authentication at Contributor level or h...

Drupal GoogleTagManager security vulnerabilities

Drupal GoogleTag Manager is an administrative plugin for the Drupal community. A security vulnerability exists in Drupal GoogleTag Manager versions prior to 1.10.0 that stems from improper input neutralization and could lead to a cross-site scripting attack...

PT-2025-33499 · Drupal · Drupal Googletag Manager

Name of the Vulnerable Software and Affected Versions: Drupal GoogleTag Manager versions 0.0.0 through 1.9.9 Description: Improper neutralization of input during web page generation allows for Cross-Site Scripting XSS. Recommendations: Update Drupal GoogleTag Manager to version 1.10.0 or later...

Linux Distros Unpatched Vulnerability : CVE-2019-17016

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - When pasting a tag from the clipboard into a rich text editor, the CSS sanitizer incorrectly rewrites a @namespace rule. This could allow for injection into...

Malicious code in bytel-tag-commander (npm)

The package bytel-tag-commander was found to contain malicious code...

MAL-2025-31792 Malicious code in react-google-publisher-tag-v15 (npm)

The package react-google-publisher-tag-v15 was found to contain malicious code...

MAL-2025-16410 Malicious code in bytel-tag-commander (npm)

The package bytel-tag-commander was found to contain malicious code...

MAL-2025-22173 Malicious code in hang-tag-site (npm)

The package hang-tag-site was found to contain malicious code...

MAL-2025-25622 Malicious code in lpcjkzfyrtbovsne (npm)

The package lpcjkzfyrtbovsne was found to contain malicious code...

MAL-2025-34376 Malicious code in tag-middleware (npm)

The package tag-middleware was found to contain malicious code...

MAL-2025-34402 Malicious code in talento (npm)

The package talento was found to contain malicious code...

MAL-2025-7285 Malicious code in @crabas0npm/eos-quo-necessitatibus-delectus (npm)

The package @crabas0npm/eos-quo-necessitatibus-delectus was found to contain malicious code...

Malicious code in hang-tag-site (npm)

The package hang-tag-site was found to contain malicious code...

Malicious code in react-google-publisher-tag-v15 (npm)

The package react-google-publisher-tag-v15 was found to contain malicious code...

Malicious code in tag-middleware (npm)

The package tag-middleware was found to contain malicious code...

MAL-2025-9600 Malicious code in @vue-semcore/tag (npm)

The package @vue-semcore/tag was found to contain malicious code...

CVE-2025-54698

Improper Neutralization of Script-Related HTML Tags in a Web Page Basic XSS vulnerability in RadiusTheme Classified Listing classified-listing allows Code Injection.This issue affects Classified Listing: from n/a through = 5.0.0...

PT-2026-45417

Name of the Vulnerable Software and Affected Versions GPAC Project/MP4Box versions prior to 26.02.0 Description A segmentation violation occurs in the gf isom apple set tag ex function located in /isomedia/isom write.c due to pointer dereferencing. This allows an attacker to cause a Denial of...