CVE-2025-31476

Summary: CVE-2025-31476 affects tarteaucitron.js. A vulnerability caused by insufficient URL validation allowed a user with high privileges to insert URLs with insecure schemes (e.g., javascript:alert()) that could lead to arbitrary JavaScript execution when a link is clicked. The issue enables e...

CVE-2024-13252

The Drupal TacJS module is vulnerable to a Cross-Site Scripting (XSS) vulnerability due to improper input neutralization during web page generation. This issue affects versions from 0.0.0 before 6.5.0 . The root cause is a lack of sufficient filtering for user-supplied markup inside content, whic...