-
Bug
-
Resolution: Cannot Reproduce
-
None
-
1.19.2
-
None
-
Unconfirmed
-
(Unassigned)
Getting an item with clickEvent in it's name allows command execution as a player that clicked it.
Steps to reproduce:
- Execute the following: /give @s netherite_sword{Damage:0,display:{Name:'{"text":"click me!
","clickEvent":{"action":"run_command","value":"/op @a"'}}}}
- Kill a player with the item you got.
- A player (out of curiosity) clicks on item name, executes the command / sends a chat message, without knowing what would it do.