CVE-2026-55872 - GYM One admin user list is vulnerable to stored cross-site scripting
CVE ID :CVE-2026-55872 Published : Oct. 15, 2026, 7:17 p.m. | 16 minutes ago Description :GYM One is open-source gym management software for fitness centers, personal trainers, and sports clubs. Prior to 1.4.1, GYM One's admin/users/index.php renders the stored firstname, lastname, and email...