CVE-2021-27559

The Contact page in Monica 2.19.1 allows stored XSS via the Nickname field.

• CWE-79

• https://github.com/monicahq/monica/issues/4888Issue Tracking, Third Party Advisory
• https://github.com/monicahq/monica/pull/4543Exploit, Third Party Advisory
• https://github.com/monicahq/monica/issues/4888Issue Tracking, Third Party Advisory
• https://github.com/monicahq/monica/pull/4543Exploit, Third Party Advisory

Published

Feb 22, 2021

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2021-27548There is a Null Pointer Dereference vulnerability in the XFA…5.5
• CVE-2021-27549Genymotion Desktop through 3.2.0 leaks the host's clipboard …5.3
• CVE-2021-27550Polaris Office v9.102.66 is affected by a divide-by-zero err…5.5
• CVE-2021-27556The Cron job tab in EasyCorp ZenTao 12.5.3 allows remote att…7.2
• CVE-2021-27557A cross-site request forgery (CSRF) vulnerability in the Cro…4.3
• CVE-2021-27558A cross site scripting (XSS) issue in EasyCorp ZenTao 12.5.3…6.1
• CVE-2021-27561Yealink Device Management (DM) 3.6.0.20 allows command injec…9.8
• CVE-2021-27562In Arm Trusted Firmware M through 1.2, the NS world may trig…5.5
• CVE-2021-27564A stored XSS issue exists in Appspace 6.2.4. After a user is…5.4
• CVE-2021-27565The web server in InterNiche NicheStack through 4.0.1 allows…7.5
• CVE-2021-27568An issue was discovered in netplex json-smart-v1 through 201…5.9
• CVE-2021-27569An issue was discovered in Emote Remote Mouse through 4.0.0.…5.3