Search Results (4 CVEs found)

CVE Vendors Products Updated CVSS v3.1
CVE-2024-54998 1 Monicahq 1 Monica 2025-05-07 5.4 Medium
MonicaHQ v4.1.2 was discovered to contain an authenticated Client-Side Injection vulnerability via the Reason parameter at /people/h:[id]/debts/create.
CVE-2024-54997 1 Monicahq 1 Monica 2025-05-07 5.4 Medium
MonicaHQ v4.1.1 was discovered to contain an authenticated Client-Side Injection vulnerability via the entry text field at /journal/entries/ID/edit.
CVE-2024-54996 1 Monicahq 1 Monica 2025-05-07 8.8 High
MonicaHQ v4.1.2 was discovered to contain multiple authenticated Client-Side Injection vulnerabilities via the title and description parameters at /people/ID/reminders/create.
CVE-2024-54994 1 Monicahq 1 Monica 2025-05-07 6.5 Medium
MonicaHQ v4.1.2 was discovered to contain multiple Client-Side Injection vulnerabilities via the first_name and last_name parameters in the Add a new relationship feature.