Security Advisory
CVE-2024-55074
8.8
HIGH
Vulnerability Description
The edit profile function of Grocy through 4.3.0 allows stored XSS and resultant privilege escalation by uploading a crafted HTML or SVG file, a different issue than CVE-2024-8370.
Published Date
January 6, 2025
Official Source
NIST NVD Advisory