Skip to content
OpenAdvisories
Unscored DRUPAL-CONTRIB-2020-016

This webform module enables you to build 'Term select' and 'Term checkboxes' elements. The module doesn't sufficiently check term 'view' ac…

Published May 6, 2020 · Updated Sep 10, 2026 · Assigned by DRUPAL

Package: drupal/webform Ecosystem: Packagist

Description

This webform module enables you to build 'Term select' and 'Term checkboxes' elements.

The module doesn't sufficiently check term 'view' access when rendering the 'Term select' and 'Term checkboxes' elements. Unpublished terms will always appear in the 'Term select' and 'Term checkboxes' elements.

Affected packages

EcosystemPackageAffectedFixedRecord
Packagist drupal/webform < 5.11.0 5.11.0 DRUPAL-CONTRIB-2020-016

References