MonicaHQ v4.1.2 was discovered to contain a Client-Side Injection vulnerability via the last_name parameter the General Information module.

Published Jan 13, 2025 · Updated Jul 5, 2026 · Assigned by mitre