CVE-2025-8362 – Drupal GoogleTag Manager Cross-Site Scripting (XSS)

CVE ID : CVE-2025-8362

Published : Aug. 15, 2025, 5:15 p.m. | 44 minutes ago

Description : Improper Neutralization of Input During Web Page Generation (‘Cross-site Scripting’) vulnerability in Drupal GoogleTag Manager allows Cross-Site Scripting (XSS).This issue affects GoogleTag Manager: from 0.0.0 before 1.10.0.

Severity: 4.3 | MEDIUM

Visit the link for more details, such as CVSS details, affected products, timeline, and more…