142 matches found
Monica Cross-Site Scripting Vulnerability (CNVD-2021-12660)
Monica is an open source personal relationship management system. A stored cross-site scripting vulnerability exists in the Contacts page in Monica 2.19.1. The vulnerability can be exploited to conduct a cross-site scripting attack via the Last Name field...
Monica cross-site scripting vulnerability (CNVD-2021-12658)
Monica is an open source personal relationship management system. A stored cross-site scripting vulnerability exists in the Contacts page in Monica 2.19.1. The vulnerability can be exploited to conduct a cross-site scripting attack via the First Name field...
Monica Cross-Site Scripting Vulnerability
Monica is an open source personal relationship management system. A stored cross-site scripting vulnerability exists in the Contacts page in Monica 2.19.1. The vulnerability can be exploited to conduct a cross-site scripting attack via the Nickname field...
Monica Cross-Site Scripting Vulnerability (CNVD-2021-12659)
Monica is an open source personal relationship management system. A stored cross-site scripting vulnerability exists in the Contacts page in Monica 2.19.1. The vulnerability can be exploited to conduct cross-site scripting attacks via the Middle Name field...
Monica 2.19.1 - 'last_name' Stored XSS
Exploit Title: Monica 2.19.1 - 'lastname' Stored XSS Date: 22-02-2021 Exploit Author: BouSalman Vendor Homepage: https://www.monicahq.com/ Software Link: https://github.com/monicahq/monica/releases Version: Monica 2.19.1 Tested on: Ubuntu 18.04 CVE : CVE-2021-27370 POST /people HTTP/1.1 Host:...
CVE-2021-27371
The Contact page in Monica 2.19.1 allows stored XSS via the Description field...
CVE-2021-27559
The Contact page in Monica 2.19.1 allows stored XSS via the Nickname field...
CVE-2021-27371
The Contact page in Monica 2.19.1 allows stored XSS via the Description field...
CVE-2021-27370
The Contact page in Monica 2.19.1 allows stored XSS via the Last Name field...
CVE-2021-27559
The Contact page in Monica 2.19.1 allows stored XSS via the Nickname field...
CVE-2021-27370
The Contact page in Monica 2.19.1 allows stored XSS via the Last Name field...
CVE-2021-27369
The Contact page in Monica 2.19.1 allows stored XSS via the Middle Name field...
CVE-2021-27368
The Contact page in Monica 2.19.1 allows stored XSS via the First Name field...
CVE-2021-27368
The Contact page in Monica 2.19.1 allows stored XSS via the First Name field...
CVE-2021-27369
The Contact page in Monica 2.19.1 allows stored XSS via the Middle Name field...
Cross site scripting
The Contact page in Monica 2.19.1 allows stored XSS via the Description field...
Design/Logic Flaw
The Contact page in Monica 2.19.1 allows stored XSS via the Middle Name field...
CVE-2021-27369
The Contact page in Monica 2.19.1 allows stored XSS via the Middle Name field...