1 matches found
CVE-2025-66563: Improper Neutralization of Input During Web Page Generation
Monkeytype is a minimalistic and customizable typing test. In 25.49.0 and earlier, there is improper handling of user input which allows an attacker to execute malicious javascript on anyone viewing a malicious quote submission. quote.text and quote.source are user input, and they're inserted...
7.1CVSS6.1AI score0.00239EPSS
SaveExploits1References1
20