Google Tag

2 CVEs product

Monthly

Sort: Newest CVSS Score EPSS Score Oldest

CVE-2025-31683 MEDIUM PATCH This Month

Cross-Site Request Forgery (CSRF) vulnerability in Drupal Google Tag allows Cross Site Request Forgery.0.0 before 1.8.0, from 2.0.0 before 2.0.8. Rated medium severity (CVSS 6.8), this vulnerability is remotely exploitable, no authentication required. No vendor patch available.

Google CSRF Google Tag Drupal

NVD

CVSS 3.1

6.8

EPSS

0.2%

CVE-2025-31682 MEDIUM PATCH This Month

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Drupal Google Tag allows Cross-Site Scripting (XSS).0.0 before 1.8.0, from 2.0.0 before 2.0.8. Rated medium severity (CVSS 4.8), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

Google XSS Google Tag Drupal

NVD

CVSS 3.1

4.8

EPSS

0.4%

CVE-2025-31683

EPSS 0% CVSS 6.8

MEDIUM PATCH This Month

Google CSRF Google Tag +1

NVD

CVE-2025-31682

EPSS 0% CVSS 4.8

MEDIUM PATCH This Month

Google XSS Google Tag +1

NVD