CVE-2024-54994

MonicaHQ v4.1.2 was discovered to contain multiple Client-Side Injection vulnerabilities via the firstname and lastname parameters in the Add a new relationship feature...

CVE-2024-54994

creationtimestamp| type| source ---|---|--- 2025-01-10 20:26:21+00:00| seen| https://infosec.exchange/users/cve/statuses/113805936382976726 2025-01-10 21:15:31+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lfg4g4wad52m 2025-01-10 21:38:20+00:00| seen|...

CVE-2024-54994

MonicaHQ v4.1.2 is affected by multiple client-side injection vulnerabilities in the Add a new relationship feature, exploitable via the first_name and last_name parameters. The CVE entry (CVE-2024-54994) lists a CVSS v3.1 base score of 6.5 (Medium) with network attack vector, low complexity, no ...