← All advisories

Unrated severityNVD Advisory· Published May 13, 2014· Updated Jun 16, 2026

CVE-2013-4504

CVE-2013-4504

Description

The Monster Menus module 7.x-1.x before 7.x-1.15 allows remote attackers to read arbitrary node comments via a crafted URL.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

17

Monster Menus Project/Monster Menus16 versions
cpe:2.3:a:monster_menus_project:monster_menus:7.x-1.0:*:*:*:*:*:*:*+ 15 more
- cpe:2.3:a:monster_menus_project:monster_menus:7.x-1.0:*:*:*:*:*:*:*
- cpe:2.3:a:monster_menus_project:monster_menus:7.x-1.1:*:*:*:*:*:*:*
- cpe:2.3:a:monster_menus_project:monster_menus:7.x-1.10:*:*:*:*:*:*:*
- cpe:2.3:a:monster_menus_project:monster_menus:7.x-1.11:*:*:*:*:*:*:*
- cpe:2.3:a:monster_menus_project:monster_menus:7.x-1.12:*:*:*:*:*:*:*
- cpe:2.3:a:monster_menus_project:monster_menus:7.x-1.13:*:*:*:*:*:*:*
- cpe:2.3:a:monster_menus_project:monster_menus:7.x-1.14:*:*:*:*:*:*:*
- cpe:2.3:a:monster_menus_project:monster_menus:7.x-1.2:*:*:*:*:*:*:*
- cpe:2.3:a:monster_menus_project:monster_menus:7.x-1.3:*:*:*:*:*:*:*
- cpe:2.3:a:monster_menus_project:monster_menus:7.x-1.4:*:*:*:*:*:*:*
- cpe:2.3:a:monster_menus_project:monster_menus:7.x-1.5:*:*:*:*:*:*:*
- cpe:2.3:a:monster_menus_project:monster_menus:7.x-1.6:*:*:*:*:*:*:*
- cpe:2.3:a:monster_menus_project:monster_menus:7.x-1.7:*:*:*:*:*:*:*
- cpe:2.3:a:monster_menus_project:monster_menus:7.x-1.8:*:*:*:*:*:*:*
- cpe:2.3:a:monster_menus_project:monster_menus:7.x-1.9:*:*:*:*:*:*:*
- cpe:2.3:a:monster_menus_project:monster_menus:7.x-1.x:dev:*:*:*:*:*:*
Drupal/Monster Menusllm-create
Range: >=7.x-1.0, <7.x-1.15

Patches

Vulnerability mechanics

References

3

drupal.org/node/2123287nvdPatch
drupal.org/node/2124289nvdPatchVendor Advisory
seclists.org/oss-sec/2013/q4/210nvd

News mentions

0

No linked articles in our index yet.