Google Tag

2 CVEs product

Monthly

Sort: Newest CVSS Score EPSS Score Oldest

CVE-2025-31683 PHP MEDIUM PATCH This Month

Cross-Site Request Forgery (CSRF) vulnerability in Drupal Google Tag allows Cross Site Request Forgery.0.0 before 1.8.0, from 2.0.0 before 2.0.8. Rated medium severity (CVSS 6.8), this vulnerability is remotely exploitable, no authentication required. No vendor patch available.

Google CSRF Drupal Google Tag

NVD

CVSS 3.1

6.8

EPSS

0.2%

CVE-2025-31682 PHP MEDIUM PATCH This Month

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Drupal Google Tag allows Cross-Site Scripting (XSS).0.0 before 1.8.0, from 2.0.0 before 2.0.8. Rated medium severity (CVSS 4.8), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

XSS Google Drupal Google Tag

NVD

CVSS 3.1

4.8

EPSS

0.4%

CVE-2025-31683 PHP

EPSS 0% CVSS 6.8

MEDIUM PATCH This Month

Google CSRF Drupal +1

NVD

CVE-2025-31682 PHP

EPSS 0% CVSS 4.8

MEDIUM PATCH This Month

XSS Google Drupal +1

NVD