Monkeytype Stored Cross-Site Scripting Vulnerability in Quote Approval Modal

A stored cross-site scripting vulnerability has been identified in Monkeytype versions through 25.49.0. This issue arises from improper handling of user input in the quote approval modal, allowing an attacker to execute malicious JavaScript in the context of users viewing the quote. The vulnerability is triggered by inserting HTML-containing user input directly into the DOM without adequate sanitization.

Impact

Exploitation of this vulnerability allows for the execution of malicious JavaScript on the client side, impacting anyone who views the affected quote.

Reproduction

To reproduce this vulnerability, switch to quotes mode in Monkeytype and click on the search icon. Then, select 'Submit a quote' and enter a payload, such as a script tag, into the 'text' or 'source' input boxes. After submitting the quote, the payload will execute when the quote is viewed.

Remediation

Users can update to Monkeytype version 25.49.0 or later to address this vulnerability.