medium5.4
CVE-2021-27368
The Contact page in Monica 2.19.1 allows stored XSS via the First Name field.
Impact
The Contact page in Monica 2.19.1 allows stored XSS via the First Name field.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Monicahq | Monica | Version 2.19.1 |