PT-2026-82372

CVE-2026-81201

Published

2026-08-26

Updated

2026-09-02

Description by

CVSS 3.1

6.1

Medium

MetricsAV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

Name of the Vulnerable Software and Affected Versions Drupal Monster Menus versions 0.0.0 through 9.5.3

Description Stored Cross-site Scripting (XSS) occurs because the module does not sufficiently sanitize HTML code within the page name when it is displayed in the built-in tree browser. This allows an attacker with the ability to create pages to execute arbitrary JavaScript in the context of a user session. Cross-site Scripting is a flaw where malicious scripts are injected into trusted websites.

Recommendations Update Drupal Monster Menus to a version later than 9.5.3.

Exploitability

Exploit

Fix

Impacts

Researchers

Vendors

Affected products