CVE-2024-54951

Monica version 4.1.2 is vulnerable to Stored Cross-Site Scripting (XSS) due to improper neutralization of input during web page generation. A malicious user can trigger this vulnerability by creating a malformed contact with a JavaScript payload in the name fields and subsequently selecting that ...