Skip to content
OpenAdvisories
Unscored DRUPAL-CONTRIB-2020-018

This webform module enables you to build a 'Term checkboxes' element. The module doesn't sufficiently check term 'view' access when renderi…

Published May 13, 2020 · Updated Sep 10, 2026 · Assigned by DRUPAL

Package: drupal/webform Ecosystem: Packagist

Description

This webform module enables you to build a 'Term checkboxes' element.

The module doesn't sufficiently check term 'view' access when rendering 'Term checkboxes' elements. Unpublished terms will always appear in the 'Term checkboxes' element.

Affected packages

EcosystemPackageAffectedFixedRecord
Packagist drupal/webform < 5.12.0 5.12.0 DRUPAL-CONTRIB-2020-018

References