Monica 4.1.2 is vulnerable to Cross Site Scripting (XSS). A malicious user can create a malformed contact and use that contact in the "HOW YOU MET" customization options to trigger the XSS.
CVSS
No CVSS.
References
| Link | Resource |
|---|---|
| https://github.com/Allevon412/Monica-Stored-XSS-Vulnerability | Exploit Third Party Advisory |
Configurations
History
14 Aug 2025, 21:07
| Type | Values Removed | Values Added |
|---|---|---|
| First Time |
Monicahq monica
Monicahq |
|
| CPE | cpe:2.3:a:monicahq:monica:4.1.2:*:*:*:*:*:*:* | |
| References | () https://github.com/Allevon412/Monica-Stored-XSS-Vulnerability - Exploit, Third Party Advisory |
13 Feb 2025, 23:15
| Type | Values Removed | Values Added |
|---|---|---|
| New CVE |
Information
Published : 2025-02-13 23:15
Updated : 2025-08-14 21:07
NVD link : CVE-2024-54951
Mitre link : CVE-2024-54951
JSON object : View
Products Affected
monicahq
- monica
CWE
No CWE.