CVE-2026-11908 Tagify - Moderately critical - Cross-site scripting (XSS) - SA-CONTRIB-2026-043

Improper Neutralization of Input During Web Page Generation "Cross-site Scripting" vulnerability in Drupal Tagify allows Stored XSS. This issue affects Tagify versions: from 0.0.0 to 1.2.52...

CVE-2026-11908

CVE-2026-11908 affects Drupal Tagify, with stored XSS due to improper sanitization when rendering Tagify dropdown suggestions. Vulnerable versions: 0.0.0 through 1.2.52. An attacker who can create or edit taxonomy terms in a vocabulary could inject arbitrary JavaScript executed in the context of ...