Skip to content
OpenAdvisories

Package · Packagist

drupal/tacjs

4 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • Medium 4.8
    CVE-2025-31476

    tarteaucitron.js allows url scheme injection via unfiltered inputs

    tarteaucitron.js is a compliant and accessible cookie banner. A vulnerability was identified in tarteaucitron.js, allowing a user with high privileges (access to the site's source code or a CMS plugin) to enter a URL containing an insecure scheme such as java…

    amauric tarteaucitron.js tarteaucitronjs drupal/tacjs npm Packagist
  • Medium 5.4
    CVE-2024-13252

    TacJS - Moderately critical - Cross Site Scripting - SA-CONTRIB-2024-016

    Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Drupal TacJS allows Cross-Site Scripting (XSS).This issue affects TacJS: from 0.0.0 before 6.5.0.

    Drupal TacJS drupal/tacjs Packagist