PYSEC-2023-144

Cross Site Request Forgery CSRF vulnerability in wger Project wger Workout Manager 2.2.0a3 allows a remote attacker to gain privileges via the user-management feature in the gym/views/gym.py, templates/gym/resetuserpassword.html, templates/user/overview.html, core/views/user.py, and...

wger Cross-Site Scripting Vulnerability

wger is a self-hosted FLOSS fitness/exercise, nutrition and weight tracker written in Django. A security vulnerability exists in wger Workout Manager version v.2.2.0a3, which stems from a cross-site scripting vulnerability that allows remote attackers to gain privileges...

PT-2023-26585 · Unknown · Wger Workout Manager

Name of the Vulnerable Software and Affected Versions: wger Workout Manager version 2.2.0a3 Description: A Cross Site Scripting issue allows a remote attacker to gain privileges via the license author field in the add-ingredient function in the templates/ingredients/view.html,...