CVE-2013-4230

no score yetEPSS 1.2%

The mm_webform submodule in the Monster Menus module 6.x-6.x before 6.x-6.61 and 7.x-1.x before 7.x-1.13 for Drupal does not properly restrict access to webform submissions, which allows remote authenticated users with the "Who can read data submitted to this webform" permission to delete arbitrary submissions via unspecified vectors.

EPSS: 1.2% chance of exploitation in the next 30 days; higher than 68% of CVEs (scores of 2026-10-31)
CWE: CWE-264
Published: 2013-08-21
Modified: 2026-06-16
Record from: the NVD, synced 2026-10-19

Affected

monster_menus_project:monster_menus

References

http://secunia.com/advisories/54391
http://www.openwall.com/lists/oss-security/2013/08/10/1
http://www.securityfocus.com/bid/61711
https://drupal.org/node/2059805
https://drupal.org/node/2059807

Check your stack JSON