CVE-2025-62032

9th percentile - higher than 9% of all known CVEs

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in tagDiv tagDiv Cloud Library td-cloud-library allows DOM-Based XSS.This issue affects tagDiv Cloud Library: from n/a through < 3.9.2.

An attacker can inject a malicious script that executes in the user's browser, potentially leading to session data theft, redirects, or other actions within the site context. This may compromise user security and the organization's reputation.

Update the tagDiv Cloud Library plugin to version 3.9.2 or later. Until then, consider disabling the plugin or implementing additional security filters.