Ggrocy

Products

Exploited and recent CVEs

• CVE-2026-71236 High 8.7 Grocy - Stored XSS via HTMLPurifier Output Double-Decode 0.4%
• CVE-2020-15253 High 7.3 Stored XSS in Grocy 1.2%