GR
Vendor
grocy
2
CVEs
0
On KEV
0
New 30D
Products
Recent CVEs
| CVE | Product | CVSS | Published | Summary |
|---|---|---|---|---|
| CVE-2026-71236 | GR grocy grocy | 8.7 | Aug 5 | Grocy - Stored XSS via HTMLPurifier Output Double-Decode |
| CVE-2020-15253 | GR Grocy Grocy | 4.8 | Oct 14 | Versions of Grocy <= 2.7.1 are vulnerable to Cross-Site Scripting via the Create Shopping List module, that is rendered upon deleting that Shopping List |