CVEs-PoC/2021/CVE-2021-27370.md

CVE-2021-27370

Description

The Contact page in Monica 2.19.1 allows stored XSS via the Last Name field.

POC

Reference

• http://packetstormsecurity.com/files/161501/Monica-2.19.1-Cross-Site-Scripting.html
• https://github.com/monicahq/monica/issues/4888
• https://github.com/monicahq/monica/pull/4543

Github

• https://github.com/ajmalabubakkr/CVE