| Package | Affected versions | Patched versions |
|---|---|---|
| drupal/tagify | < 1.2.44 | 1.2.44 |
| tagify | < 1.2.44 | 1.2.44 |
This module enables you to use the Tagify library to enhance text input fields with tag-style UI elements.
The module does not sufficiently sanitize the infoLabel value under certain configurations, which can result in a cross-site scripting (XSS) vulnerability.
This vulnerability is mitigated by the fact that only uncommon module configurations expose the affected infoLabel output, and an attacker must have user-level access to supply or manipulate this value.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free