CVE-2021-27369

MEDIUM

Monica 2.19.1 - Stored Cross-Site Scripting via Middle Name Field

Title source: llm
STIX 2.1

Description

The Contact page in Monica 2.19.1 allows stored XSS via the Middle Name field.

References (2)

Core 2
Core References
Exploit, Issue Tracking, Third Party Advisory x_refsource_misc
https://github.com/monicahq/monica/issues/4888
Exploit, Third Party Advisory x_refsource_misc
https://github.com/monicahq/monica/pull/4543

Scores

CVSS v3 5.4
EPSS 0.0019
EPSS Percentile 40.7%
Attack Vector NETWORK
CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N

Details

CWE
CWE-79
Status published
Products (1)
monicahq/monica 2.19.1
Published Feb 22, 2021
Tracked Since Feb 18, 2026