high8.8
CVE-2024-54996
MonicaHQ v4.1.2 was discovered to contain multiple authenticated Client-Side Injection vulnerabilities via the title and description parameters at /people/ID/r…
Impact
MonicaHQ v4.1.2 was discovered to contain multiple authenticated Client-Side Injection vulnerabilities via the title and description parameters at /people/ID/reminders/create.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Monicahq | Monica | Version 4.1.2 |