EUVD-2024-52722

Malicious code in bioql PyPI...

PT-2025-3087 · Monicahq · Monicahq

Name of the Vulnerable Software and Affected Versions: MonicaHQ version 4.1.1 Description: The issue is related to an authenticated Client-Side Injection vulnerability. This vulnerability can be triggered by an authenticated user through the entry text field at the "/journal/entries/ID/edit" API...

CVE-2024-54997

MonicaHQ v4.1.1 is affected by an authenticated Client-Side Injection vulnerability via the entry text field at /journal/entries/ID/edit. Root cause: injection in the entry text field that an authenticated user can trigger. Impact: low to moderate confidentiality/integrity risk, with no documente...

CVE-2024-54997

MonicaHQ v4.1.1 was discovered to contain an authenticated Client-Side Injection vulnerability via the entry text field at /journal/entries/ID/edit...