| Package | Affected versions | Patched versions |
|---|---|---|
| grocy | ≤ 4.0.3 |
A Cross-Site Scripting (XSS) vulnerability in the recipe preparation component within /api/objects/recipes and note component within /api/objects/shopping_lists/ of Grocy <= 4.0.3 allows attackers to obtain the victim's cookies.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free