Skip to content
Every CVE
Browse
Docs
Sources
Guide
Search
/
Get
API key
Every CVE
Vendors
Mayerbalintdev
Mayerbalintdev vulnerabilities
Products
Gym-one
2
Newest
mayerbalintdev
gym-one
GYM One admin user list is vulnerable to stored cross-site scripting
CVE-2026-55872
8.7
High
October 15, 2026
mayerbalintdev
gym-one
GYM One: Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') in admin/users/index.php
CVE-2026-55871
6.5
Medium
October 15, 2026
esc
Pages
All vulnerabilities
Browse
Docs
Sources
Guide
Get API key
Move
Enter
Open