mayerbalintdev GYM-One

• CVE-2026-55872 High 8.7 GYM One admin user list is vulnerable to stored cross-site scripting 0.3%
• CVE-2026-55871 Medium 6.5 GYM One: Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') in admin/users/index.php 0.3%