| Package | Affected versions | Patched versions |
|---|---|---|
| monica | = 4.1.2 |
Monica 4.1.2 is vulnerable to Cross Site Scripting (XSS). A malicious user can create a malformed contact and use that contact in the "HOW YOU MET" customization options to trigger the XSS.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free