CVE-2024-54996: Monicahq Monica

High severity, CVSS 8.8. EPSS: 0.8% chance of exploitation in the next 30 days.

MonicaHQ v4.1.2 was discovered to contain multiple authenticated Client-Side Injection vulnerabilities via the title and description parameters at /people/ID/reminders/create.

Affected products

• Monicahq Monica: version 4.1.2 only

Published 2025-01-10. Last modified 2026-07-05.