CVE-2025-62528mediumCWE-79

CVE-2025-62528: medium-severity vulnerability in remram44 taguette

Taguette cross-site scripting vulnerability via tag name, tag description, document name and document description

Published

Follow this CVE+ Monitor taguette+ Monitor taguette

E-mail alert when it lands in KEV, gets a public PoC or its score goes up.

13Vexday Risk Score

No sign of exploitation. No public exploitation artifact known so far.

ssvc Trackcvss 5.4epss 0.2%
Taguette is an open source qualitative research tool. An issue has been discovered in Taguette versions prior to 1.5.0. It was possible for a project member to put JavaScript in name or description fields which would run on project load. This issue has been patched in version 1.5.0.
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N
Affected products
remram44 · taguette
Related CVEs — remram44 taguette

In the same product, most dangerous first.

CVE-2025-67502MEDIUMTaguette does not safeguard against Open RedirectEPSS 0.3%CVE-2025-62527HIGHTaguette vulnerable to password reset link poisoningEPSS 0.3%