EUVD-2020-18140

Malware in sbrugna...

CVE-2020-25454

Cross-site Scripting XSS vulnerability in grocy 2.7.1 via the add recipe module, which gets executed when deleting the recipe...

CVE-2020-25454

Cross-site Scripting XSS vulnerability in grocy 2.7.1 via the add recipe module, which gets executed when deleting the recipe...

CVE-2020-25454

CVE-2020-25454 affects grocy 2.7.1: a Cross-site Scripting (XSS) vulnerability in the add recipe module that executes when deleting a recipe. The issue is described as a stored XSS caused by input in the add recipe flow, with exploitation steps and payload demonstrated in the PacketStorm PoC for ...

PT-2020-16083

Name of the Vulnerable Software and Affected Versions grocy version 2.7.1 Description The issue is a Cross-site Scripting XSS vulnerability that occurs in the add recipe module of grocy. This vulnerability is executed when a recipe is deleted. Recommendations For grocy version 2.7.1, consider...

CVE-2020-25454: Improper Neutralization of Input During Web Page Generation

Cross-site Scripting XSS vulnerability in grocy 2.7.1 via the add recipe module, which gets executed when deleting the recipe...