What’s Vulnerable › Products
Drupal TacJS vulnerabilities
2 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 2 published in the last 12 months.
Check whether your Drupal TacJS version is affected
Latest Drupal TacJS vulnerabilities
- CVE-2025-31476 — tarteaucitron.js allows url scheme injection via unfiltered inputs (CVSS 4.8)
- CVE-2024-13252 — TacJS - Moderately critical - Cross Site Scripting - SA-CONTRIB-2024-016 (CVSS 5.4)