PT-2026-5202 · Unknown · Drupal Tagify

Bram Driesen + 5 · Publicado 2026-01-28 · Atualizado 2026-02-03 · CVE-2025-13983

Positive Technologies (AI Summary)

CVSS v3.1

5.4

Média

Vetor base

AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N

Name of the Vulnerable Software and Affected Versions Drupal Tagify versions prior to 1.2.44

Description A flaw exists in Drupal Tagify that allows for Cross-Site Scripting (XSS). This issue is due to improper neutralization of input during web page generation. The vulnerability could potentially allow attackers to inject malicious scripts into web pages viewed by other users.

Recommendations Update Drupal Tagify to version 1.2.44 or later.

Correção

XSS

Enumeração de Fraquezas

CWE-79

Identificadores relacionados

CVE-2025-13983

DRUPAL-CONTRIB-2025-121

Produtos afetados

Drupal Tagify

Referências · 6

• https://nvd.nist.gov/vuln/detail/CVE-2025-13983 · Nota de Segurança
• https://drupal.org/sa-contrib-2025-121 · Nota
• https://t.me/CVEtracker/43182 · Publicação no Telegram
• https://twitter.com/CVEnew/status/2016616582730903998 · Publicação no Twitter
• https://osv.dev/vulnerability/CVE-2025-13983 · Aviso do Fabricante
• https://t.me/cveNotify/150751 · Publicação no Telegram