CVE-2024-13256

The Email Contact module for the Drupal CMS is vulnerable to an Insufficient Granularity of Access Control vulnerability (CWE-1220) affecting versions 0.0.0 through 2.0.4 . The root cause is that the module fails to sufficiently handle restricted entity or field access to the mail sending form wh...