CVE-2024-13248: Private Content Project Private Content

Medium severity, CVSS 5.5. EPSS: 0.2% chance of exploitation in the next 30 days.

Incorrect Privilege Assignment vulnerability in Drupal Private content allows Target Influence via Framing.This issue affects Private content: from 0.0.0 before 2.1.0.

Affected products

• Private Content Project Private Content: before 8.x-2.1 (fixed in 8.x-2.1)

Published 2025-01-09. Last modified 2026-06-17.