PT-2026-89253
CVE-2026-87954
·
Published
2026-09-09
·
Updated
2026-10-22
Description by
CVSS 3.1
4.3
MediumMetricsAV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N
Name of the Vulnerable Software and Affected Versions
Taxonomy Term Glossary versions 0.0.0 through 4.6.0
Description
Insufficient access control on taxonomy terms allows anonymous users to view any taxonomy terms on the site, including those that are unpublished or restricted. This is possible through the module's JSON endpoint.
Recommendations
Update Taxonomy Term Glossary to a version later than 4.6.0.
Exploitability
Exploit
Fix
Impacts
Vendors
Affected products
Found an issue in the description? Have something to add? Feel free to write us 👾