CVE-2024-54951
Monica 4.1.2 is vulnerable to Cross Site Scripting (XSS). A malicious user can create a malformed contact and use that contact in the "HOW YOU MET" cu...
原文の説明
取得元が公開している説明をそのまま載せています (多くは英語)。
Monica 4.1.2 is vulnerable to Cross Site Scripting (XSS). A malicious user can create a malformed contact and use that contact in the "HOW YOU MET" customization options to trigger the XSS.
参照URL
- advisory github.com
- advisory nvd.nist.gov
- package github.com