Threats tagged 'ghsa-7fqq-gp93-mqjc'

1 threat

Severity	CVSS	Threat	Source	Published	Score and star
Medium	5.3	CVE-2026-124637A stored Cross-Site Scripting (XSS) vulnerability was identified in the profile editing form, in the parameters Medium5.32026-11-09GCVE DatabaseCVE-2026-124637 A stored Cross-Site Scripting (XSS) vulnerability exists in the profile editing form of the website https://www.luxorgymtarrega.com. The parameters cliNom and cliCognoms do not validate or escape user input before storing it in the database and displaying it in HTML responses. This allows attackers to inject and execute arbitrary JavaScript code in the browsers of users who view the affected content. Report on CVE-2026-124637 Vulnerability CWE-79 #ghsa-7fqq-gp93-mqjc	GCVE Database	2026-11-09

Page 1 of 1