medium5.4
CVE-2024-54951
Monica 4.1.2 is vulnerable to Cross Site Scripting (XSS).
Impact
Monica 4.1.2 is vulnerable to Cross Site Scripting (XSS). A malicious user can create a malformed contact and use that contact in the "HOW YOU MET" customization options to trigger the XSS.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Monicahq | Monica | Version 4.1.2 |