Vulnerabilities > Monicahq

DATE CVE VULNERABILITY TITLE RISK
2021-02-22 CVE-2021-27370 Cross-site Scripting vulnerability in Monicahq Monica 2.19.1
The Contact page in Monica 2.19.1 allows stored XSS via the Last Name field.
network
low complexity
monicahq CWE-79
5.4
2021-02-22 CVE-2021-27369 Cross-site Scripting vulnerability in Monicahq Monica 2.19.1
The Contact page in Monica 2.19.1 allows stored XSS via the Middle Name field.
network
low complexity
monicahq CWE-79
5.4
2021-02-22 CVE-2021-27368 Cross-site Scripting vulnerability in Monicahq Monica 2.19.1
The Contact page in Monica 2.19.1 allows stored XSS via the First Name field.
network
low complexity
monicahq CWE-79
5.4