CVE-2023-48866: Improper Neutralization of Input During Web Page Generation

A Cross-Site Scripting XSS vulnerability in the recipe preparation component within /api/objects/recipes and note component within /api/objects/shoppinglists/ of Grocy = 4.0.3 allows attackers to obtain the victim's cookies...

PT-2023-30992

Name of the Vulnerable Software and Affected Versions Grocy versions = 4.0.3 Description A Cross-Site Scripting XSS issue exists in the recipe preparation component within "/api/objects/recipes" and note component within "/api/objects/shopping lists/" of Grocy, allowing attackers to obtain the...