CVE-2026-13232

Name of the Vulnerable Software and Affected Versions Drupal Advanced Content Feedback versions 0.0.0 through 2.8.0

Description An incorrect authorization issue in the Advanced Content Feedback module allows forceful browsing. The module fails to sufficiently verify authorization over the targeted feedback record during the processing of a comment submission. This issue can be exploited by users with the "give feedback" permission, which is granted to both anonymous and authenticated users by default upon installation.

Recommendations Update Drupal Advanced Content Feedback to a version later than 2.8.0.