Drupal core contains a User Interface Misrepresentation vulnerability (CVE-2025-13082) that allows content spoofing. This affects multiple versions of Drupal core starting from 8.0.0 up to but not including 10.4.9, 10.5.0 up to but not including 10.5.6, 11.0.0 up to but not including 11.1.9, and 11.2.0 up to but not including 11.2.8. The vulnerability has a medium severity rating with a CVSS score of 5.9. Fixed versions are available for all affected branches.