SparkyFitness v0.15.8.2 is vulnerable to Cross Site Scripting (XSS) via user input and LLM output.

Published Jan 15, 2026 · Updated Jan 15, 2026 · Assigned by mitre