| Package | Affected versions | Patched versions |
|---|---|---|
| grocy | = 4.0.3 |
Cross-Site Scripting (XSS) vulnerability in the ‘manageApiKeys’ component of Grocy 4.0.3 and earlier allows attackers to obtain victim's cookies when the victim clicks on the "see QR code" function.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free