Wger vulnerabilities
Products
Newest
- wger wger: Stored XSS via Unescaped License Attribution Fields 5.1 Medium
- wger wger has Broken Access Control in the Global Gym Configuration Update Endpoint 7.6 High
- wger wger: IDOR in nutritional_values endpoints exposes private dietary data via direct ORM lookup 4.3 Medium
- wger wger: IDOR via user-unscoped cache keys on routine API actions exposes workout data 3.1 Low
- wger wger: IDOR in RepetitionsConfig and MaxRepetitionsConfig API leak other users' workout data 4.3 Medium
- wger workout manager wger Workout Manager Cross-Site Request Forgery vulnerability 8.8 High
- wger workout manager wger Workout Manager Cross-site Scripting vulnerability 5.4 Medium
- wger, wger-project wger-project/wger +1 more Improper Restriction of Excessive Authentication Attempts in wger-project/wger 7.8 High