4 matches found
CVE-2020-35660
Cross Site Scripting XSS in Monica before 2.19.1 via the journal page...
5.4CVSS6.1AI score0.0089EPSS
SaveExploits1
CVE-2020-35660
Cross Site Scripting XSS in Monica before 2.19.1 via the journal page...
5.4CVSS6AI score
SaveExploits0References3
CVE-2020-35660
Cross Site Scripting XSS in Monica before 2.19.1 via the journal page...
5.4CVSS0.0089EPSS
SaveExploits1References3
CVE-2020-35660
CVE-2020-35660 is a Cross-Site Scripting (XSS) vulnerability in Monica (Regis Freyd Monica) versions prior to 2.19.1, exploitable via the journal page. The connected Huntr entry describes a stored XSS payload in the journal session, e.g. injecting HTML such as , indicating a persistent client-sid...
5.4CVSS5.3AI score0.0089EPSS
SaveExploits1References3Affected Software1
20