CVE-2023-48198

A Cross-Site Scripting XSS vulnerability in the 'product description' component within '/api/stock/products' of Grocy version = 4.0.3 allows attackers to obtain a victim's cookies...

CVE-2023-48197

Cross-Site Scripting XSS vulnerability in the ‘manageApiKeys’ component of Grocy 4.0.3 and earlier allows attackers to obtain victim's cookies when the victim clicks on the "see QR code" function...

Grocy Cross-Site Scripting Vulnerability

Grocy is a web-based self-hosted grocery and home management solution from Grocy Open Source. A cross-site scripting vulnerability exists in Grocy version v.4.0.3, which stems from a cross-site scripting XSS vulnerability in the product description component of the api/stock/products endpoint. An...

CVE-2023-48197

Cross-Site Scripting XSS vulnerability in the ‘manageApiKeys’ component of Grocy 4.0.3 and earlier allows attackers to obtain victim's cookies when the victim clicks on the "see QR code" function...

CVE-2023-42270

Grocy = 4.0.2 is vulnerable to Cross Site Request Forgery CSRF...

CVE-2023-42270

Grocy = 4.0.2 is vulnerable to Cross Site Request Forgery CSRF...

Cross site request forgery (csrf)

Grocy = 4.0.2 is vulnerable to Cross Site Request Forgery CSRF...

CVE-2023-42270

Grocy = 4.0.2 is vulnerable to Cross Site Request Forgery CSRF...

CVE-2023-42270

Grocy = 4.0.2 is vulnerable to Cross Site Request Forgery CSRF...

PT-2023-28304 · Grocy · Grocy

Name of the Vulnerable Software and Affected Versions: Grocy versions 4.0.2 and earlier Description: The issue is related to Cross Site Request Forgery CSRF, which is a type of attack that tricks a user into performing unintended actions on a web application. Recommendations: For Grocy versions...

CVE-2023-42270

Grocy

Grocy Household Management Cross-Site Request Forgery Vulnerability

Grocy Household Management Grocy is a web-based self-hosted grocery and household management solution for families by individual developers. The platform is an ERP system for families written in PHP. Grocy Household Management has a security vulnerability that stems from susceptibility to...

CVE-2020-25454

Cross-site Scripting XSS vulnerability in grocy 2.7.1 via the add recipe module, which gets executed when deleting the recipe...

CVE-2020-25454

Cross-site Scripting XSS vulnerability in grocy 2.7.1 via the add recipe module, which gets executed when deleting the recipe...

Cross site scripting

Cross-site Scripting XSS vulnerability in grocy 2.7.1 via the add recipe module, which gets executed when deleting the recipe...

CVE-2020-25454

CVE-2020-25454 affects grocy 2.7.1: a Cross-site Scripting (XSS) vulnerability in the add recipe module that executes when deleting a recipe. The issue is described as a stored XSS caused by input in the add recipe flow, with exploitation steps and payload demonstrated in the PacketStorm PoC for ...

CVE-2020-25454

Cross-site Scripting XSS vulnerability in grocy 2.7.1 via the add recipe module, which gets executed when deleting the recipe...

Grocy Household Management Solution 2.7.1 Cross Site Scripting

Exploit Author: Simran Sankhala Vendor Homepage: https://berrnd.de/ Software Link: https://github.com/grocy/grocy Version: 2.7.1 Tested on: Kali Linux 2020.3 CVE ID Alloted : CVE-2020-25454 Proof Of Concept: grocy household management solution v2.7.1, allows stored XSS , via Add recipe module, th...

Grocy Household Management Cross-Site Scripting Vulnerability

Grocy Household Management Grocy is a web-based self-hosted grocery and household management solution for families by individual developers. The platform is an ERP system for households written in PHP. A cross-site scripting vulnerability exists in Grocy Household Management Solution version 2.7....

Grocy Cross-Site Scripting Vulnerability

Grocy is a web-based self-hosted grocery and home management solution for families by individual developers. The platform is an ERP system for families written in PHP. A cross-site scripting vulnerability exists in Grocy version 2.7.1 and prior versions. The vulnerability is related to a running...