CVE-2025-13082

score

<0.1

cvss

4.3

epss

0.2%

published

2025-11-18

kev added

—

first seen

2026-10-21

Drupal core from 8.0.0 before 10.4.9, 10.5.0 before 10.5.6, 11.0.0 before 11.1.9, and 11.2.0 before 11.2.8 contains a UI misrepresentation of critical information vulnerability caused by improper content handling, letting attackers perform content spoofing, exploit requires crafted content input.