The Contact page in Monica 2.19.1 allows stored XSS via the Description field.

Published Feb 22, 2021 · Updated Aug 3, 2024 · Assigned by mitre