CVE-2026-81201

The vulnerability in Drupal Monster Menus allows for stored cross-site scripting (XSS) due to improper input neutralization during web page generation, affecting versions from 0.0.0 to 9.5.3. This flaw could enable attackers to inject malicious scripts that execute in the context of users accessing the compromised site, potentially leading to data theft or session hijacking. Organizations using affected versions of Monster Menus should prioritize patching to mitigate the risk of exploitation.