CVE-2025-31476

Summary: CVE-2025-31476 affects tarteaucitron.js. A vulnerability caused by insufficient URL validation allowed a user with high privileges to insert URLs with insecure schemes (e.g., javascript:alert()) that could lead to arbitrary JavaScript execution when a link is clicked. The issue enables e...

CVE-2024-13252

CVE-2024-13252 concerns TacJS, a Drupal-related module. The consolidated sources confirm a vulnerability due to improper neutralization of input during web page generation, resulting in Cross‑Site Scripting (XSS). Affected versions are TacJS 0.0.0 through 6.4.9, with a confirmed remediation in Ta...