Monster Menus Project: >> Monster Menus >> 9.3.1 Security Vulnerabilities
Improper Neutralization of Input During Web Page Generation ("Cross-site Scripting") vulnerability in Drupal Monster Menus allows Stored XSS. This issue affects Monster Menus versions: from 0.0.0 to 9.5.3.
CVSS Score
6.1
EPSS Score
0.003
Published
2026-09-02
Deserialization of Untrusted Data vulnerability in Drupal Monster Menus allows Object Injection.This issue affects Monster Menus: from 0.0.0 before 9.3.4, from 9.4.0 before 9.4.2.
CVSS Score
4.3
EPSS Score
0.003
Published
2025-01-09
Incorrect Authorization vulnerability in Drupal Monster Menus allows Forceful Browsing.This issue affects Monster Menus: from 0.0.0 before 9.3.2.
CVSS Score
9.1
EPSS Score
0.004
Published
2025-01-09