CVE-2025-65278: KOMAL97 Grocerymart

High severity, CVSS 7.5. EPSS: 0.2% chance of exploitation in the next 30 days.

An issue was discovered in file users.json in GroceryMart commit 21934e6 (2020-10-23) allowing unauthenticated attackers to gain sensitive information including plaintext usernames and passwords.

Affected products

• KOMAL97 Grocerymart: version 2020-10-23 only

Published 2025-11-26. Last modified 2026-06-17.