Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
2 selected

3 records

Vendor: Factorial Component: Tagify Clear all filters
TI-2026-02775 CVE-2026-3212 · GHSA-6w89-632c-v958

Tagify - Moderately critical - Cross-site scripting - SA-CONTRIB-2026-013

Priority LOW 23

Improper Neutralization of Input During Web Page Generation ("Cross-site Scripting") vulnerability in Drupal Tagify allows Cross-Site Scripting (XSS).This issue affects Tagify: from 0.0.0 before 1.2.49.

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00141 Published 2026-03-25 Fixed in 1.2.49 CWE-79
TI-2025-12778 CVE-2025-13983 · GHSA-6gfh-6c5f-fx83

Tagify - Moderately critical - Cross-site Scripting - SA-CONTRIB-2025-121

Priority LOW 24

Improper Neutralization of Input During Web Page Generation ("Cross-site Scripting") vulnerability in Drupal Tagify allows Cross-Site Scripting (XSS).This issue affects Tagify: from 0.0.0 before 1.2.44.

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00166 Published 2026-01-28 Fixed in 1.2.44 CWE-79