Detections
Analytics
CVE-2024-54951
medium
Description
Monica 4.1.2 is vulnerable to Cross Site Scripting (XSS). A malicious user can create a malformed contact and use that contact in the "HOW YOU MET" customization options to trigger the XSS.
References
https://github.com/Allevon412/Monica-Stored-XSS-Vulnerability