Advisories · Technology

Drupal Monster Menus.

Every CVE that names Drupal Monster Menus among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.

CVE-2026-114573 CVE record

CVSS 8.8 High

Monster Menus - Critical - PHP object injection - SA-CONTRIB-2026-253
- Drupal Monster Menus
- Broken access control
Not analysed yet 30 Oct 2026
CVE-2026-81201 CVE record

CVSS 6.1 Medium

Monster Menus - Moderately critical - Cross-site Scripting - SA-CONTRIB-2026-116
- Drupal Monster Menus
- Cross-site scripting (XSS)
Not analysed yet 2 Sept 2026
CVE-2024-13288 CVE record

CVSS 4.3 Medium

Monster Menus - Critical - Arbitrary PHP code execution - SA-CONTRIB-2024-052
- Drupal Monster Menus
- Insecure deserialization
Not analysed yet 9 Jan 2025
CVE-2024-13281 CVE record

CVSS 9.1 CriticalCritical · CVSS 9+

Monster Menus - Moderately critical - Access bypass, Information Disclosure - SA-CONTRIB-2024-045
- Drupal Monster Menus
- Broken access control
Not analysed yet 9 Jan 2025