Lucene search
+L

4 matches found

Cvelist
Cvelist
added 2025/12/04 10:34 p.m.34 views

CVE-2025-66563 Monkeytype vulnerable to stored XSS in approve quotes page

Monkeytype is a minimalistic and customizable typing test. In 25.49.0 and earlier, there is improper handling of user input which allows an attacker to execute malicious javascript on anyone viewing a malicious quote submission. quote.text and quote.source are user input, and they're inserted...

7.1CVSS0.00239EPSS
SaveExploits1References2
Rows per page
Query Builder