CVE-2021-27369

The vulnerability is in Monica (open-source personal relationship management system) specifically version 2.19.1. A stored XSS flaw exists on the Contact page that can be triggered via the Middle Name field. Root cause is not detailed in the provided documents beyond the store-based script inject...