mirror of
https://github.com/0xMarcio/cve.git
synced 2025-11-30 18:56:19 +00:00
693 B
693 B
CVE-2021-27370
Description
The Contact page in Monica 2.19.1 allows stored XSS via the Last Name field.
POC
Reference
- http://packetstormsecurity.com/files/161501/Monica-2.19.1-Cross-Site-Scripting.html
- https://github.com/monicahq/monica/issues/4888
- https://github.com/monicahq/monica/pull/4543