IsMyGym Reflected Cross-Site Scripting Vulnerability

A reflected cross-site scripting vulnerability has been identified in IsMyGym, a gym management application by Zuinq Studio. This issue allows attackers to execute JavaScript in the context of the user's browser by sending a malicious URL that includes a specific path and script. Exploitation of this vulnerability could lead to the theft of sensitive user information, such as session cookies, or allow attackers to perform actions on behalf of the user.

Impact

Exploitation of this vulnerability could result in reflected cross-site scripting, allowing for the execution of malicious scripts in the user's browser session.

Remediation

Users are advised to update to the latest version of IsMyGym, where this vulnerability has been fixed.