Security Advisories
CVEs affecting projects tracked on Release Alert, from NVD & OSV.
CVE-2024-54951
5.4
MEDIUMCVSS v3
Published
February 13, 2025
Affected
2 projects
Assigned by
MITRE
Severity scale
010
Description
Monica 4.1.2 is vulnerable to Cross Site Scripting (XSS). A malicious user can create a malformed contact and use that contact in the "HOW YOU MET" customization options to trigger the XSS.
monicahq/monica
GitHubPersonal CRM. Remember everything about your friends, family and business relationships.
GitHubPersonal CRM. Remember everything about your friends, family and business relationships.= 4.1.2NVD
Docker Hub