Skip to content

Monicahq Monica vulnerabilities

monicahq monicaA Host Header Poisoning vulnerability exists in Monica 4.1.2 due to improper handling of the HTTP...CVE-2026-267479.1 CriticalFebruary 20, 2026
monicahq monicaMonica 4.1.2 is vulnerable to Cross Site Scripting (XSS). A malicious user can create a malformed...CVE-2024-54951Public exploit5.4 MediumFebruary 13, 2025
monicahq monicaMonicaHQ v4.1.2 was discovered to contain a Client-Side Injection vulnerability via the last_name...CVE-2024-549996.5 MediumJanuary 13, 2025
monicahq monicaMonicaHQ v4.1.2 was discovered to contain an authenticated Client-Side Injection vulnerability...CVE-2024-549985.4 MediumJanuary 10, 2025
monicahq monicaMonicaHQ v4.1.1 was discovered to contain an authenticated Client-Side Injection vulnerability...CVE-2024-549975.4 MediumJanuary 10, 2025
monicahq monicaMonicaHQ v4.1.2 was discovered to contain multiple authenticated Client-Side Injection...CVE-2024-549968.8 HighJanuary 10, 2025
monicahq monicaMonicaHQ v4.1.2 was discovered to contain multiple Client-Side Injection vulnerabilities via the...CVE-2024-549946.5 MediumJanuary 10, 2025
monicahq monicaA stored cross-site scripting (XSS) vulnerability exists in Monica (aka MonicaHQ) 4.0.0 via an...CVE-2023-50465Public exploit5.4 MediumDecember 11, 2023
monicahq monicaMonicaHQ version 4.0.0 allows an authenticated remote attacker to execute malicious code in the...CVE-2023-307905.4 MediumMay 8, 2023
monicahq monicaMonicaHQ version 4.0.0 allows an authenticated remote attacker to execute malicious code in the...CVE-2023-307895.4 MediumMay 8, 2023
monicahq monicaMonicaHQ version 4.0.0 allows an authenticated remote attacker to execute malicious code in the...CVE-2023-307885.4 MediumMay 8, 2023
monicahq monicaMonicaHQ version 4.0.0 allows an authenticated remote attacker to execute malicious code in the...CVE-2023-307875.4 MediumMay 8, 2023
monicahq monicaMonicaHQ version 4.0.0 allows an authenticated remote attacker to execute malicious code in the...CVE-2023-10948.8 HighMay 8, 2023
monicahq monicaMonicaHQ version 4.0.0 allows an authenticated remote attacker to execute malicious code in the...CVE-2023-10318.8 HighMay 8, 2023
monicahq monicaCross Site Scripting (XSS) in Monica before 2.19.1 via the journal page.CVE-2020-356605.4 MediumApril 14, 2021
monicahq monicaThe Contact page in Monica 2.19.1 allows stored XSS via the First Name field.CVE-2021-273685.4 MediumFebruary 22, 2021
monicahq monicaThe Contact page in Monica 2.19.1 allows stored XSS via the Last Name field.CVE-2021-27370Public exploit5.4 MediumFebruary 22, 2021
monicahq monicaThe Contact page in Monica 2.19.1 allows stored XSS via the Description field.CVE-2021-273715.4 MediumFebruary 22, 2021
monicahq monicaThe Contact page in Monica 2.19.1 allows stored XSS via the Nickname field.CVE-2021-275595.4 MediumFebruary 22, 2021
monicahq monicaThe Contact page in Monica 2.19.1 allows stored XSS via the Middle Name field.CVE-2021-273695.4 MediumFebruary 22, 2021