Skip to content
OpenAdvisories

Vendor

mayerbalintdev

2 known vulnerabilities.

Products

GYM-One 2
All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • High 8.7
    CVE-2026-55872

    GYM One admin user list is vulnerable to stored cross-site scripting

    GYM One is open-source gym management software for fitness centers, personal trainers, and sports clubs. Prior to 1.4.1, GYM One's admin/users/index.php renders the stored firstname, lastname, and email profile fields into the administrator user list without …

    mayerbalintdev GYM-One