83 matches found
CVE-2020-35660
Cross Site Scripting XSS in Monica before 2.19.1 via the journal page...
Regis Freyd Monica 跨站脚本漏洞
Regis Freyd Monica is an application by the personal developer of Regis Freyd in the United States. Offers to organize and record your interactions with your loved ones. A cross-site scripting vulnerability exists in Regis Freyd Monica versions prior to 2.19.1, which can be exploited by an attack...
Monica 2.19.1 - (last_name) Stored XSS Vulnerability
Exploit Title: Monica 2.19.1 - 'lastname' Stored XSS Exploit Author: BouSalman Vendor Homepage: https://www.monicahq.com/ Software Link: https://github.com/monicahq/monica/releases Version: Monica 2.19.1 Tested on: Ubuntu 18.04 CVE : CVE-2021-27370 POST /people HTTP/1.1 Host: 192.168.99.162...
Monica 2.19.1 - 'last_name' Stored XSS
Exploit Title: Monica 2.19.1 - 'lastname' Stored XSS Date: 22-02-2021 Exploit Author: BouSalman Vendor Homepage: https://www.monicahq.com/ Software Link: https://github.com/monicahq/monica/releases Version: Monica 2.19.1 Tested on: Ubuntu 18.04 CVE : CVE-2021-27370 POST /people HTTP/1.1 Host:...
Monica 2.19.1 Cross Site Scripting
Exploit Title: Monica 2.19.1 - 'lastname' Stored XSS Date: 22-02-2021 Exploit Author: BouSalman Vendor Homepage: https://www.monicahq.com/ Software Link: https://github.com/monicahq/monica/releases Version: Monica 2.19.1 Tested on: Ubuntu 18.04 CVE : CVE-2021-27370 POST /people HTTP/1.1 Host:...
CVE-2021-27370
The Contact page in Monica 2.19.1 allows stored XSS via the Last Name field...
CVE-2021-27370
The Contact page in Monica 2.19.1 allows stored XSS via the Last Name field...
CVE-2021-27371
The Contact page in Monica 2.19.1 allows stored XSS via the Description field...
CVE-2021-27559
The Contact page in Monica 2.19.1 allows stored XSS via the Nickname field...
CVE-2021-27369
The Contact page in Monica 2.19.1 allows stored XSS via the Middle Name field...
CVE-2021-27368
The Contact page in Monica 2.19.1 allows stored XSS via the First Name field...
CVE-2021-27368
The Contact page in Monica 2.19.1 allows stored XSS via the First Name field...
Cross site scripting
The Contact page in Monica 2.19.1 allows stored XSS via the First Name field...
Cross site scripting
The Contact page in Monica 2.19.1 allows stored XSS via the Last Name field...
Cross site scripting
The Contact page in Monica 2.19.1 allows stored XSS via the Description field...
Design/Logic Flaw
The Contact page in Monica 2.19.1 allows stored XSS via the Middle Name field...
CVE-2021-27370
The Contact page in Monica 2.19.1 allows stored XSS via the Last Name field...
CVE-2021-27370
CVE-2021-27370 describes a stored XSS vulnerability in Monica 2.19.1, exploitable via the Last Name field on the Contacts page. The CVE is supported by multiple sources (NVD/NVD metrics show CVSSv3.1 base score 5.4 MEDIUM and CVSSv2 base score 3.5 LOW), with public details including exploit examp...
CVE-2021-27371
CVE-2021-27371 affects Monica 2.19.1: a stored XSS vulnerability on the Contact page via the Description field. The available sources confirm the vulnerability exists in Monica 2.19.1 and is triggered through input in the Description field; the root cause is not explicitly described in the provid...