117 matches found
CVE-2021-27559
The Contact page in Monica 2.19.1 allows stored XSS via the Nickname field...
CVE-2021-27369
The Contact page in Monica 2.19.1 allows stored XSS via the Middle Name field...
CVE-2021-27369
The Contact page in Monica 2.19.1 allows stored XSS via the Middle Name field...
CVE-2021-27368
The Contact page in Monica 2.19.1 allows stored XSS via the First Name field...
CVE-2021-27368
The Contact page in Monica 2.19.1 allows stored XSS via the First Name field...
CVE-2021-27371
The Contact page in Monica 2.19.1 allows stored XSS via the Description field...
Cross site scripting
The Contact page in Monica 2.19.1 allows stored XSS via the First Name field...
CVE-2021-27370
The Contact page in Monica 2.19.1 allows stored XSS via the Last Name field...
CVE-2021-27368
The Contact page in Monica 2.19.1 allows stored XSS via the First Name field...
Cross site scripting
The Contact page in Monica 2.19.1 allows stored XSS via the Description field...
CVE-2021-27559
The Contact page in Monica 2.19.1 allows stored XSS via the Nickname field...
Cross site scripting
The Contact page in Monica 2.19.1 allows stored XSS via the Last Name field...
CVE-2021-27369
The Contact page in Monica 2.19.1 allows stored XSS via the Middle Name field...
Design/Logic Flaw
The Contact page in Monica 2.19.1 allows stored XSS via the Middle Name field...
CVE-2021-27368
The Contact page in Monica 2.19.1 allows stored XSS via the First Name field...
CVE-2021-27368
Monica 2.19.1 is affected by a stored XSS on the Contacts page via the First Name field. The issue is documented across multiple sources (CNVD, NVD, Red Hat, OSV, CNVD mirrors) as a stored XSS vulnerability in the Contact page. The available documents do not provide concrete remediation steps or ...
CVE-2021-27370
The Contact page in Monica 2.19.1 allows stored XSS via the Last Name field...
CVE-2021-27370
CVE-2021-27370 describes a stored XSS vulnerability in Monica 2.19.1, exploitable via the Last Name field on the Contacts page. The CVE is supported by multiple sources (NVD/NVD metrics show CVSSv3.1 base score 5.4 MEDIUM and CVSSv2 base score 3.5 LOW), with public details including exploit examp...
CVE-2021-27371
CVE-2021-27371 affects Monica 2.19.1: a stored XSS vulnerability on the Contact page via the Description field. The available sources confirm the vulnerability exists in Monica 2.19.1 and is triggered through input in the Description field; the root cause is not explicitly described in the provid...