MM
Product
Monster Menus
7
CVEs
0
On KEV
9.1
Max CVSS
0
New 30D
Severity mix
Critical 1High 0Medium 2Low 0
Watch
Add Monster Menus to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2024-13281 | 9.1 | Jan 9 | Monster Menus - Moderately critical - Access bypass, Information Disclosure - SA-CONTRIB-2024-045 Affected: before 7.x-1.34; 9.3.0 before 9.3.2 |
| CVE-2026-81201 | 6.1 | Sep 2 | Monster Menus - Moderately critical - Cross-site Scripting - SA-CONTRIB-2026-116 Affected: 6.x-6.19 through 6.x-6.64; 7.x-1.0 through 7.x-1.34; 9.0.0 before 9.5.3 |
| CVE-2024-13288 | 4.3 | Jan 9 | Monster Menus - Critical - Arbitrary PHP code execution - SA-CONTRIB-2024-052 Affected: before 9.3.4; 9.4.0 before 9.4.2 |
| CVE-2015-8095 | – | Nov 9 | The recycle bin feature in the Monster Menus module 7.x-1.21 before 7.x-1.24 for Drupal does not properly remove nodes from view, which allows remote attackers to obtain sensitive… Affected: 7.x-1.0; 7.x-1.1; 7.x-1.2; 7.x-1.3; 7.x-1.4; 7.x-1.5; +19 more |
| CVE-2013-4504 | – | May 13 | The Monster Menus module 7.x-1.x before 7.x-1.15 allows remote attackers to read arbitrary node comments via a crafted URL Affected: 7.x-1.0; 7.x-1.1; 7.x-1.2; 7.x-1.3; 7.x-1.4; 7.x-1.5; +10 more |
| CVE-2013-4230 | – | Aug 21 | The mm_webform submodule in the Monster Menus module 6.x-6.x before 6.x-6.61 and 7.x-1.x before 7.x-1.13 for Drupal does not properly restrict access to webform submissions, which… Affected: 6.x-6.19; 6.x-6.22; 6.x-6.23; 6.x-6.24; 6.x-6.25; 6.x-6.26; +34 more |
| CVE-2013-4229 | – | Aug 21 | Cross-site scripting (XSS) vulnerability in the Monster Menus module 7.x-1.x before 7.x-1.12 for Drupal allows remote authenticated users with permissions to add pages to inject… Affected: 7.x-1.0; 7.x-1.1; 7.x-1.2; 7.x-1.3; 7.x-1.4; 7.x-1.5; +7 more |
Showing 7