monkeytype vulnerabilities (CVE)

CVE records published for monkeytype, newest first. Follow to get an email when a new one appears.

2 results
7.1High
CVE-2025-66563

Monkeytype vulnerable to stored XSS in approve quotes page

monkeytypegame monkeytype

Monkeytype is a minimalistic and customizable typing test. In 25.49.0 and earlier, there is improper handling of user input which allows an attacker to execute malicious javascript on anyone viewing a malicious quote submission. quote.text and quote.source ar…