CVE-2021-27559

The Contact page in Monica 2.19.1 allows stored XSS via the Nickname field...

CVE-2021-27559

The Contact page in Monica 2.19.1 allows stored XSS via the Nickname field...

CVE-2021-27559

Monica 2.19.1 is affected by a stored XSS on the Contacts page via the Nickname field. The vulnerability is triggered when untrusted input is stored and later rendered in the page, potentially allowing script execution in the victim’s browser. The connected documents confirm the existence of this...