| Package | Affected versions | Patched versions |
|---|---|---|
| drupal/tagify | < 1.2.49 | 1.2.49 |
| tagify | < 1.2.49 | 1.2.49 |
This module integrates the Tagify JavaScript library to enhance taxonomy entity reference widgets.
The module does not sufficiently sanitise user-supplied input before rendering it inside JavaScript template strings within the Tagify widget. This allows arbitrary JavaScript execution in the browser when a user creates or edits content.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free