The Contact page in Monica 2.19.1 allows stored XSS via the Middle Name field.Referenceshttps://github.com/monicahq/monica/issues/4888https://github.com/monicahq/monica/pull/4543