CVE-2024-54951

n/a / n/a PUBLISHED

Description (CNA)

Monica 4.1.2 is vulnerable to Cross Site Scripting (XSS). A malicious user can create a malformed contact and use that contact in the "HOW YOU MET" customization options to trigger the XSS.

Affected (CNA)

Vendor / product	Versions
n/a / n/a	affected n/a

CWE

No CWE identifiers supplied.

References

https://github.com/Allevon412/Monica-Stored-XSS-Vulnerability

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.