CVE-2024-54951

Monica version 4.1.2 is vulnerable to a Stored Cross-Site Scripting (XSS) vulnerability. A malicious user can create a malformed contact—specifically by injecting XSS payloads into all name fields using double quotes—and then select that contact within the "HOW YOU MET" customization options. Thi...

CVE-2024-54951: Improper Neutralization of Input During Web Page Generation

Monica 4.1.2 is vulnerable to Cross Site Scripting XSS. A malicious user can create a malformed contact and use that contact in the "HOW YOU MET" customization options to trigger the XSS...