SQL Injection

silverstripe/taxonomy module is vulnerable to SQL injection. The vulnerability is due to insufficient input validation and sanitization within the TaxonomyDirectoryController, which allows ab attackers to inject malicious SQL queries...