CVE-2024-13288: Monster Menus Project Monster Menus

Medium severity, CVSS 4.3. EPSS: 0.3% chance of exploitation in the next 30 days.

Deserialization of Untrusted Data vulnerability in Drupal Monster Menus allows Object Injection.This issue affects Monster Menus: from 0.0.0 before 9.3.4, from 9.4.0 before 9.4.2.

Affected products

• Monster Menus Project Monster Menus: before 9.3.4 (fixed in 9.3.4); from 9.4.0, before 9.4.2 (fixed in 9.4.2)

Published 2025-01-09. Last modified 2026-06-17.