CVE-2026-3212 in Tagify

Sumário (Inglês)

Improper Neutralization of Input During Web Page Generation ("Cross-site Scripting") vulnerability in Drupal Tagify allows Cross-Site Scripting (XSS).This issue affects Tagify: from 0.0.0 before 1.2.49.

If you want to get best quality of vulnerability data, you may have to visit VulDB.

Responsável

drupal

Reservar

25/02/2026

Divulgação

25/03/2026

Estado

Confirmado

Inscrições

VulDB provides additional information and datapoints for this CVE:

ID	Vulnerabilidade	CWE	Exp	Con	CVE
353167	Tagify Script de Site Cruzado	79	Não definido	Correção oficial	CVE-2026-3212

Fontes

• MITRE
• NVD
• CVE Details