Skip to content
OpenAdvisories

Package · Packagist

drupal/monster_menus

4 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

4 results · Feed

  • High 8.8
    CVE-2026-114573

    Monster Menus - Critical - PHP object injection - SA-CONTRIB-2026-253

    Improperly Controlled Modification of Dynamically-Determined Object Attributes vulnerability in Drupal Monster Menus allows Object Injection. This issue affects Monster Menus versions: from 0.0.0 to 9.5.6.

    Drupal Monster Menus drupal/monster_menus Packagist
  • Medium 6.1
    CVE-2026-81201

    Monster Menus - Moderately critical - Cross-site Scripting - SA-CONTRIB-2026-116

    Improper Neutralization of Input During Web Page Generation ("Cross-site Scripting") vulnerability in Drupal Monster Menus allows Stored XSS. This issue affects Monster Menus versions: from 0.0.0 to 9.5.3.

    Drupal Monster Menus drupal/monster_menus Packagist
  • Medium 4.3
    CVE-2024-13288

    Monster Menus - Critical - Arbitrary PHP code execution - SA-CONTRIB-2024-052

    Deserialization of Untrusted Data vulnerability in Drupal Monster Menus allows Object Injection.This issue affects Monster Menus: from 0.0.0 before 9.3.4, from 9.4.0 before 9.4.2.

    Drupal Monster Menus drupal/monster_menus Packagist
  • Critical 9.1
    CVE-2024-13281

    Monster Menus - Moderately critical - Access bypass, Information Disclosure - SA-CONTRIB-2024-045

    Incorrect Authorization vulnerability in Drupal Monster Menus allows Forceful Browsing.This issue affects Monster Menus: from 0.0.0 before 9.3.2.

    Drupal Monster Menus drupal/monster_menus Packagist