VDB
CVE-2025-31682
CVE-2025-31682
PUBLISHED
CVSS 4.800000190734863 MEDIUM
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Drupal Google Tag allows Cross-Site Scripting (XSS).This issue affects Google Tag: from 0.0.0 before 1.8.0, from 2.0.0 before 2.0.8.
EPSS 0.23% · 13.8th percentile
Risk Scores
CVSS 3.1
4.800000190734863
CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N
EPSS Score
0.23%
13.8th percentile
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Drupal | Google Tag | 0.0.0, 2.0.0 |
| drupal | google_tag | 0, 2.0.0 |
| google_tag_project | google_tag | 2.0.0, * |
Timeline
- Jan 29, 2025 CVE Published
- Mar 31, 2025 Coalition ESS Score
- Apr 1, 2025 EPSS Score
- Apr 1, 2025 Coalition ESS Score
- Apr 14, 2025 EPSS Score
- Apr 27, 2025 EPSS Score
- May 10, 2025 EPSS Score
- May 14, 2025 Coalition ESS Score
- May 24, 2025 EPSS Score
- Jun 2, 2025 Coalition ESS Score
- Jun 6, 2025 EPSS Score
- Jun 19, 2025 EPSS Score