CVE-2025-13983

MEDIUM

Tagify - Moderately critical - Cross-site Scripting - SA-CONTRIB-2025-121

Title source: CVE List
STIX 2.1 vulnerability

Record summary

CVE-2025-13983 has a selected CVSS score of 5.4 (medium).

Description

Improper Neutralization of Input During Web Page Generation ("Cross-site Scripting") vulnerability in Drupal Tagify allows Cross-Site Scripting (XSS).This issue affects Tagify: from 0.0.0 before 1.2.44.

Description source: CVE List

Exploitation context

CISA SSVC decision

ExploitationNone
AutomatableNo
Technical impactPartial

CISA Coordinator · SSVC 2.0.3 · Evaluated Jan 29, 2026 · Source: CVE List

Affected products and versions

1
ProductSourceVersion range

Tagify

Browse Drupal / Tagify

Default status: unaffected

CVE List0.0.0 to < 1.2.44affected

References

2