medium5.4
CVE-2023-48198
A Cross-Site Scripting (XSS) vulnerability in the 'product description' component within '/api/stock/products' of Grocy version <= 4.0.3 allows attackers to ob…
Impact
A Cross-Site Scripting (XSS) vulnerability in the 'product description' component within '/api/stock/products' of Grocy version <= 4.0.3 allows attackers to obtain a victim's cookies.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Grocy Project | Grocy | Version 4.0.3 |