CVE-2025-62528 – Taguette cross-site scripting vulnerability via tag name, tag description, document name and document description

CVE ID : CVE-2025-62528

Published : Oct. 20, 2025, 8:15 p.m. | 26 minutes ago

Description : Taguette is an open source qualitative research tool. An issue has been discovered in Taguette versions prior to 1.5.0. It was possible for a project member to put JavaScript in name or description fields which would run on project load. This issue has been patched in version 1.5.0.

Severity: 5.4 | MEDIUM

Visit the link for more details, such as CVSS details, affected products, timeline, and more…