CVE-2024-13256

The Email Contact module for the Drupal CMS is vulnerable to an insufficient granularity of access control flaw, which allows for forceful browsing . The root cause is that the module fails to sufficiently handle restricted entity or field access to the mail sending form specifically when the "Em...