Mayerbalintdev Gym-one vulnerabilities

• mayerbalintdev gym-one GYM One admin user list is vulnerable to stored cross-site scripting CVE-2026-55872 8.7 HighOctober 15, 2026
• mayerbalintdev gym-one GYM One: Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') in admin/users/index.php CVE-2026-55871 6.5 MediumOctober 15, 2026