medium6.1
CVE-2026-81201
Improper Neutralization of Input During Web Page Generation ("Cross-site Scripting") vulnerability in Drupal Monster Menus allows Stored XSS.
Impact
Improper Neutralization of Input During Web Page Generation ("Cross-site Scripting") vulnerability in Drupal Monster Menus allows Stored XSS. This issue affects Monster Menus versions: from 0.0.0 to 9.5.3.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Monster Menus Project | Monster Menus | from 6.x-6.19 through 6.x-6.64 from 7.x-1.0 through 7.x-1.34 from 9.0.0 before 9.5.3 |