Monica 4.1.2 is vulnerable to Cross Site Scripting XSS. A malicious user can create a malformed contact and use that contact in the "HOW YOU MET" customization options to trigger the XSS...
5.4CVSS0.00493EPSS
SaveExploits2References1
ATTACKERKB•added 2021/02/22 3:15 p.m.•5 views
CVE-2021-27369
The Contact page in Monica 2.19.1 allows stored XSS via the Middle Name field...
