CVE-2025-62528 — Taguette cross-site scripting vulnerability via tag name, tag description, document name and document description

CVE-2025-62528

Taguette cross-site scripting vulnerability via tag name, tag description, document name and document description PUBLISHED

Description (CNA)

Taguette is an open source qualitative research tool. An issue has been discovered in Taguette versions prior to 1.5.0. It was possible for a project member to put JavaScript in name or description fields which would run on project load. This issue has been patched in version 1.5.0.

Affected (CNA)

Vendor / product	Versions
remram44 / taguette	affected < 1.5.0

CWE

CWE-79

References

https://github.com/remram44/taguette/security/advisories/GHSA-g9qw-g6rv-3889
https://gitlab.com/remram44/taguette/-/issues/330

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.