Grocy Household Management Cross-Site Request Forgery Vulnerability

Grocy Household Management Grocy is a web-based self-hosted grocery and household management solution for families by individual developers. The platform is an ERP system for families written in PHP. Grocy Household Management has a security vulnerability that stems from susceptibility to...

Grocy Household Management Cross-Site Scripting Vulnerability

Grocy Household Management Grocy is a web-based self-hosted grocery and household management solution for families by individual developers. The platform is an ERP system for households written in PHP. A cross-site scripting vulnerability exists in Grocy Household Management Solution version 2.7....

Grocy Household Management Solution 2.7.1 Cross Site Scripting

Exploit Author: Simran Sankhala Vendor Homepage: https://berrnd.de/ Software Link: https://github.com/grocy/grocy Version: 2.7.1 Tested on: Kali Linux 2020.3 CVE ID Alloted : CVE-2020-25454 Proof Of Concept: grocy household management solution v2.7.1, allows stored XSS , via Add recipe module, th...