CVE-2026-124637

A stored Cross-Site Scripting (XSS) vulnerability exists in the profile editing form of the website luxorgymtarrega.com . The flaw occurs because user-provided data in the cliNom and cliCognoms parameters (via the /dadespersonals/modificarClient/ID endpoint) is neither validated nor escaped befor...