The vulnerability of the system for monitoring and analyzing physical activity and health status of FITSTATS Technologies AthleteMonitoring, related to the lack of measures taken to protect the website structure, allows attackers to perform cross-site attacks.

The vulnerability of the FITSTATS Technologies AthleteMonitoring system for monitoring and analyzing physical activity and health status is related to the lack of measures taken to protect the website’s structure. Exploiting this vulnerability could allow a malicious actor to perform cross-site...

CVE-2025-1842

A vulnerability classified as problematic was found in FITSTATS Technologies AthleteMonitoring up to 20250302. This vulnerability affects unknown code of the file /login.php. The manipulation of the argument username leads to cross site scripting. The attack can be initiated remotely. The exploit...

CVE-2025-1842

A vulnerability classified as problematic was found in FITSTATS Technologies AthleteMonitoring up to 20250302. This vulnerability affects unknown code of the file /login.php. The manipulation of the argument username leads to cross site scripting. The attack can be initiated remotely. The exploit...

CVE-2025-1842 FITSTATS Technologies AthleteMonitoring login.php cross site scripting

A vulnerability classified as problematic was found in FITSTATS Technologies AthleteMonitoring up to 20250302. This vulnerability affects unknown code of the file /login.php. The manipulation of the argument username leads to cross site scripting. The attack can be initiated remotely. The exploit...

CVE-2025-1842 FITSTATS Technologies AthleteMonitoring login.php cross site scripting

A vulnerability classified as problematic was found in FITSTATS Technologies AthleteMonitoring up to 20250302. This vulnerability affects unknown code of the file /login.php. The manipulation of the argument username leads to cross site scripting. The attack can be initiated remotely. The exploit...

CVE-2025-1842

CVE-2025-1842 affects FITSTATS Technologies AthleteMonitoring (up to version 20250302). The vulnerability is a cross-site scripting flaw in the /login.php login flow caused by manipulation of the username parameter in user input. It is exploitable remotely, and publicly disclosed exploits exist. ...

CVE-2025-1842: Improper Neutralization of Input During Web Page Generation

A vulnerability classified as problematic was found in FITSTATS Technologies AthleteMonitoring up to 20250302. This vulnerability affects unknown code of the file /login.php. The manipulation of the argument username leads to cross site scripting. The attack can be initiated remotely. The exploit...