Lucene search
+L

1 matches found

OSV
OSV
•added 2026/03/18 8:00 p.m.•16 views

GHSA-WH3H-GVC4-CC2G Statamic is missing authorization check on taxonomy term creation via fieldtype

Impact Low-privileged Control Panel users could create taxonomy terms by submitting requests to the field action processing endpoint with attacker-controlled field definitions. This bypasses the authorization checks enforced on the standard taxonomy term creation endpoint. Patches This has been...

4.3CVSS5.8AI score0.00266EPSS
SaveExploits0References3
Rows per page
Query Builder