| Package | Affected versions | Patched versions |
|---|---|---|
| grocy | = 4.0.3 |
A Cross-Site Scripting (XSS) vulnerability in the 'product description' component within '/api/stock/products' of Grocy version <= 4.0.3 allows attackers to obtain a victim's cookies.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free