Lucene search
MonicahqMonica
6 matches found
CVE-2021-27370
The Contact page in Monica 2.19.1 allows stored XSS via the Last Name field.
5.4CVSS5AI score0.00297EPSS
Web
CVE-2020-35660
Cross Site Scripting (XSS) in Monica before 2.19.1 via the journal page.
5.4CVSS5.3AI score0.00263EPSS
CVE-2021-27371
The Contact page in Monica 2.19.1 allows stored XSS via the Description field.
5.4CVSS5.1AI score0.00172EPSS
CVE-2021-27559
The Contact page in Monica 2.19.1 allows stored XSS via the Nickname field.
5.4CVSS5.1AI score0.00191EPSS
CVE-2021-27368
The Contact page in Monica 2.19.1 allows stored XSS via the First Name field.
5.4CVSS5.1AI score0.00191EPSS
CVE-2021-27369
The Contact page in Monica 2.19.1 allows stored XSS via the Middle Name field.
5.4CVSS5.1AI score0.00191EPSS