NuytsTech Security

CVE-2021-27370

by ·

The Contact page in Monica 2.19.1 allows stored XSS via the Last Name field.

Date published : 2021-02-22

http://packetstormsecurity.com/files/161501/Monica-2.19.1-Cross-Site-Scripting.html

https://github.com/monicahq/monica/issues/4888

Tags: