CVE-2024-54994

MonicaHQ v4.1.2 was discovered to contain multiple Client-Side Injection vulnerabilities via the firstname and lastname parameters in the Add a new relationship feature...

CVE-2024-54994

creationtimestamp| type| source ---|---|--- 2025-01-10 20:26:21+00:00| seen| https://infosec.exchange/users/cve/statuses/113805936382976726 2025-01-10 21:15:31+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lfg4g4wad52m 2025-01-10 21:38:20+00:00| seen|...

CVE-2024-54994

The relationship management system MonicaHQ v4.1.2 is vulnerable to multiple Client-Side Injection flaws. The root cause lies in the improper neutralization of input via the first_name and last_name parameters within the Add a new relationship feature. This could allow an attacker to execute mali...