Threat database

4 threats

Severity	CVSS	Signals	Threat	Source	Published
Medium	5.4	EPSS 0.4%	CVE-2024-54998MonicaHQ · n/a Medium5.4EPSS 0.4%2025-01-10CVE Database V5CVE-2024-54998 MonicaHQ v4.1.2 was discovered to contain an authenticated Client-Side Injection vulnerability via the Reason parameter at /people/h:[id]/debts/create. EPSS 0.4%Vulnerability	CVE Database V5	2025-01-10
Medium	5.4	EPSS 0.3%	CVE-2024-54997MonicaHQ · n/a Medium5.4EPSS 0.3%2025-01-10CVE Database V5CVE-2024-54997 MonicaHQ v4.1.1 was discovered to contain an authenticated Client-Side Injection vulnerability via the entry text field at /journal/entries/ID/edit. EPSS 0.3%Vulnerability	CVE Database V5	2025-01-10
High	8.8	EPSS 0.8%	CVE-2024-54996MonicaHQ · n/a High8.8EPSS 0.8%2025-01-10CVE Database V5CVE-2024-54996 MonicaHQ v4.1.2 was discovered to contain multiple authenticated Client-Side Injection vulnerabilities via the title and description parameters at /people/ID/reminders/create. EPSS 0.8%Vulnerability	CVE Database V5	2025-01-10
Medium	6.5	EPSS 0.3%	CVE-2024-54994MonicaHQ · n/a Medium6.5EPSS 0.3%2025-01-10CVE Database V5CVE-2024-54994 MonicaHQ v4.1.2 was discovered to contain multiple Client-Side Injection vulnerabilities via the first_name and last_name parameters in the Add a new relationship feature. EPSS 0.3%Vulnerability	CVE Database V5	2025-01-10

Page 1 of 1