CVE-2026-55872 GYM One admin user list is vulnerable to stored cross-site scripting

GYM One is open-source gym management software for fitness centers, personal trainers, and sports clubs. Prior to 1.4.1, GYM One's admin/users/index.php renders the stored firstname, lastname, and email profile fields into the administrator user list without HTML output encoding. An attacker who...

CVE-2026-55872

The open-source gym management software GYM One is vulnerable to stored cross-site scripting (XSS) in versions prior to 1.4.1 . The root cause is the lack of HTML output encoding when the admin/users/index.php page renders the firstname , lastname , and email profile fields into the administrator...

CVE-2026-55872

GYM One is open-source gym management software for fitness centers, personal trainers, and sports clubs. Prior to 1.4.1, GYM One's admin/users/index.php renders the stored firstname, lastname, and email profile fields into the administrator user list without HTML output encoding. An attacker who...

CVE-2026-55872 GYM One admin user list is vulnerable to stored cross-site scripting

GYM One is open-source gym management software for fitness centers, personal trainers, and sports clubs. Prior to 1.4.1, GYM One's admin/users/index.php renders the stored firstname, lastname, and email profile fields into the administrator user list without HTML output encoding. An attacker who...

WordPress YaySMTP – WP Mail SMTP with Email Logs, Tracking & Reports plugin <= 2.7.7 - Authenticated (Subscriber+) Arbitrary File Upload vulnerability

Authenticated Subscriber+ Arbitrary File Upload vulnerability discovered by Wordfence PRISM in WordPress Plugin YaySMTP versions = 2.7.7...

WordPress WP Mail Logging plugin <= 1.17.0 - Authenticated (Administrator+) Sensitive Information Exposure in LIKE Wildcard in Personal Data Export Email vulnerability

Authenticated Administrator+ Sensitive Information Exposure in LIKE Wildcard in Personal Data Export Email vulnerability discovered by Sawyer in WordPress Plugin WP Mail Logging versions = 1.17.0...

MGASA-2026-0507 Updated roundcubemail package fixes security vulnerabilities

Fix CSS declaration smuggling via un-encoded ampersand emission, reported by Zach Hanley of Horizon3.ai Fix CSS property injection via body background attribute, reported by zenithhostingevan Fix email header injection via bare CR in the subject field, reported by CVE-Hunter-Leo Fix email header...

WordPress Customer Email Verification for WooCommerce plugin <= 3.3.0 - Unauthenticated Privilege Escalation to 'alg_wc_ev_verify_email' Parameter vulnerability

Unauthenticated Privilege Escalation to 'algwcevverifyemail' Parameter vulnerability discovered by Wordfence PRISM in WordPress Plugin Email Verification for WooCommerce versions = 3.3.0...

CVE-2026-102631 authd: Account takeover via username fallback in identity matching after IdP email reassignment

In authd before 0.7.1, the user identity matching in UpdateUser internal/users/manager.go resolves an incoming login by the broker-scoped provider ID, but falls back to matching the username when the provider ID does not belong to any known user, and does not reject a conflicting non-empty provid...

CVE-2026-102631 authd: Account takeover via username fallback in identity matching after IdP email reassignment

In authd before 0.7.1, the user identity matching in UpdateUser internal/users/manager.go resolves an incoming login by the broker-scoped provider ID, but falls back to matching the username when the provider ID does not belong to any known user, and does not reject a conflicting non-empty provid...

Wayn111 Waynboot-Mall Authorization Issue Vulnerability

Wayn111 and Waynboot-Mall versions 2.0.0 and earlier have an authorization issue vulnerability. This vulnerability stems from the lack of authentication for the /callback/email endpoint. Unverified attackers can submit any subject, content, and recipient via EmailController.sendEmail, thereby usi...

WordPress User Profile Builder Cross-Site Script Vulnerability

WordPress User Profile Builder 4.0.3 and earlier versions have a cross-site scripting vulnerability. This vulnerability stems from insufficient input cleaning and output escaping for the First Name field, resulting in a storage-based cross-site script. Unauthenticated attackers can inject any web...

Syed Balkhi WP Mail Logging Information Leak Vulnerability

Syed Balkhi WP Mail Logging 1.17.0 and earlier versions have a vulnerability that leads to information leakage. This vulnerability stems from improper handling of the email address parameter. Attackers who are authenticated and have administrator or higher privileges can extract complete email...

tduck-survey-form authorization issue vulnerability

The tduck-survey-form 5.3 and earlier versions have an authorization issue vulnerability. This vulnerability stems from a lack of authorization verification, which may allow any authenticated user to retrieve the original form settings of other owners through the GET /user/form/setting/key...

Softaculous GoSMTP Pro cross-site scripting vulnerability

Softaculous GoSMTP Pro versions 1.2.3 and earlier have a cross-site scripting vulnerability. This vulnerability stems from insufficient input cleaning and output escaping, making it susceptible to storage-type cross-site scripting attacks via comment content within the email log text. In WordPres...

WordPress Customer Email Verification for WooCommerce: Permissions and Access Control Vulnerabilities

WordPress Customer Email Verification for WooCommerce 3.3.0 and earlier versions has a permission and access control vulnerability. This vulnerability stems from improper handling of the algwcevverifyemail parameter. The activation code is generated only through wprand100 and is reversible...

Astra Linux – Vulnerability in Python-Django

In Django 3.2 before 3.2.20, 4 before 4.1.10, and 4.2 before 4.2.3, EmailValidator and URLValidator are vulnerable to a ReDoS regular expression denial of service attack due to a very large number of domain name labels for emails and URLs...

Astra Linux – Vulnerability in curl

When an OAuth2 bearer token is used for an HTTPS transfer, and that transfer performs a cross-protocol redirect to a second URL that uses an IMAP, LDAP, POP3, or SMTP scheme, curl may incorrectly pass the bearer token to the new target host...

Astra Linux – vulnerability in Thunderbird

When requesting an OpenPGP key from a WKD server, an incorrect padding size was used; a network observer could have determined the length of the requested email address. This vulnerability has been fixed in Thunderbird 136 and Thunderbird 128.8...

Astra Linux – Vulnerability found in Python 3.11, Python 2.7, Python 3.7, and Pypy

The email module in Python, as of version 3.11.3, incorrectly parses email addresses that contain special characters. The incorrect portion of the RFC2822 header is identified as the value of the addr-spec. In some applications, an attacker can bypass a protection mechanism by allowing access to...