p PatchFirst

PatchFirst · Latest vulnerabilities

drupal/google_tag vulnerabilities

Vulnerabilities published for drupal/google_tag in the last 30 days: 0. Listed in the KEV catalogue: 0.

RSS ↗ JSON ↗
Filter vulnerabilities
Clear filters

Vulnerabilities: 2

  1. CVE-2025-31683

    Medium · CVSS 6.8EPSS 0.18%Fix available

    Google Tag - Moderately critical - Cross Site Request Forgery - SA-CONTRIB-2025-012

    Cross-Site Request Forgery (CSRF) vulnerability in Drupal Google Tag allows Cross Site Request Forgery.This issue affects Google Tag: from 0.0.0 before 1.8.0, from 2.0.0 before 2.0.8.

    drupal/google_tag drupal/google_tagPHP
    • Update to 1.8.0
    • Update to 2.0.8
    Published Updated
    Source advisory 1 ↗Source advisory 2 ↗

  2. CVE-2025-31682

    Medium · CVSS 4.8EPSS 0.24%Fix available

    Google Tag - Moderately critical - Cross Site Scripting - SA-CONTRIB-2025-011

    Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Drupal Google Tag allows Cross-Site Scripting (XSS).This issue affects Google Tag: from 0.0.0 before 1.8.0, from 2.0.0 before 2.0.8.

    drupal/google_tag drupal/google_tagPHP
    • Update to 1.8.0
    • Update to 2.0.8
    Published Updated
    Source advisory 1 ↗Source advisory 2 ↗

Check your server

Check your installed stack and versions against the current vulnerability feeds.

Check your server →