Monicahq vulnerabilities

Products

• Monica 20

Newest

• monicahq monica A Host Header Poisoning vulnerability exists in Monica 4.1.2 due to improper handling of the HTTP... CVE-2026-26747 9.1 CriticalFebruary 20, 2026
• monicahq monica Monica 4.1.2 is vulnerable to Cross Site Scripting (XSS). A malicious user can create a malformed... CVE-2024-54951 Public exploit 5.4 MediumFebruary 13, 2025
• monicahq monica MonicaHQ v4.1.2 was discovered to contain a Client-Side Injection vulnerability via the last_name... CVE-2024-54999 6.5 MediumJanuary 13, 2025
• monicahq monica MonicaHQ v4.1.2 was discovered to contain an authenticated Client-Side Injection vulnerability... CVE-2024-54998 5.4 MediumJanuary 10, 2025
• monicahq monica MonicaHQ v4.1.1 was discovered to contain an authenticated Client-Side Injection vulnerability... CVE-2024-54997 5.4 MediumJanuary 10, 2025
• monicahq monica MonicaHQ v4.1.2 was discovered to contain multiple authenticated Client-Side Injection... CVE-2024-54996 8.8 HighJanuary 10, 2025
• monicahq monica MonicaHQ v4.1.2 was discovered to contain multiple Client-Side Injection vulnerabilities via the... CVE-2024-54994 6.5 MediumJanuary 10, 2025
• monicahq monica A stored cross-site scripting (XSS) vulnerability exists in Monica (aka MonicaHQ) 4.0.0 via an... CVE-2023-50465 Public exploit 5.4 MediumDecember 11, 2023
• monicahq monica MonicaHQ version 4.0.0 allows an authenticated remote attacker to execute malicious code in the... CVE-2023-30790 5.4 MediumMay 8, 2023
• monicahq monica MonicaHQ version 4.0.0 allows an authenticated remote attacker to execute malicious code in the... CVE-2023-30789 5.4 MediumMay 8, 2023
• monicahq monica MonicaHQ version 4.0.0 allows an authenticated remote attacker to execute malicious code in the... CVE-2023-30788 5.4 MediumMay 8, 2023
• monicahq monica MonicaHQ version 4.0.0 allows an authenticated remote attacker to execute malicious code in the... CVE-2023-30787 5.4 MediumMay 8, 2023
• monicahq monica MonicaHQ version 4.0.0 allows an authenticated remote attacker to execute malicious code in the... CVE-2023-1094 8.8 HighMay 8, 2023
• monicahq monica MonicaHQ version 4.0.0 allows an authenticated remote attacker to execute malicious code in the... CVE-2023-1031 8.8 HighMay 8, 2023
• monicahq monica Cross Site Scripting (XSS) in Monica before 2.19.1 via the journal page. CVE-2020-35660 5.4 MediumApril 14, 2021
• monicahq monica The Contact page in Monica 2.19.1 allows stored XSS via the First Name field. CVE-2021-27368 5.4 MediumFebruary 22, 2021
• monicahq monica The Contact page in Monica 2.19.1 allows stored XSS via the Last Name field. CVE-2021-27370 Public exploit 5.4 MediumFebruary 22, 2021
• monicahq monica The Contact page in Monica 2.19.1 allows stored XSS via the Description field. CVE-2021-27371 5.4 MediumFebruary 22, 2021
• monicahq monica The Contact page in Monica 2.19.1 allows stored XSS via the Nickname field. CVE-2021-27559 5.4 MediumFebruary 22, 2021
• monicahq monica The Contact page in Monica 2.19.1 allows stored XSS via the Middle Name field. CVE-2021-27369 5.4 MediumFebruary 22, 2021