CVE-2024-54998

MonicaHQ v4.1.2 was discovered to contain an authenticated Client-Side Injection vulnerability via the Reason parameter at /people/h:id/debts/create...

CVE-2024-54998

MonicaHQ v4.1.2 was discovered to contain an authenticated Client-Side Injection vulnerability via the Reason parameter at /people/h:id/debts/create...

CVE-2024-54998

creationtimestamp| type| source ---|---|--- 2025-01-10 20:34:03+00:00| seen| https://infosec.exchange/users/cve/statuses/113805966874561734 2025-01-10 21:15:38+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lfg4gdvtzv2k 2025-01-10 21:39:21+00:00| seen|...

CVE-2024-54998

MonicaHQ v4.1.2 was discovered to contain an authenticated Client-Side Injection vulnerability via the Reason parameter at /people/h:id/debts/create...

CVE-2024-54998

MonicaHQ v4.1.2 is vulnerable to an authenticated Client-Side Injection vulnerability. The flaw exists in the Reason parameter at the /people/h:[id]/debts/create API endpoint. Exploitation of this vulnerability can lead to unauthorized execution of client-side code. As of the current reports, no ...