Reflected Cross-Site Scripting Vulnerability in IsMyGym Software by Zuinq Studio

CVE-2026-4316

What is CVE-2026-4316?

A security vulnerability exists in IsMyGym software by Zuinq Studio that permits reflected Cross-Site Scripting (XSS). This is due to a lack of proper sanitization of the 'ret' parameter in the reservation endpoint. Attackers can exploit this weakness to inject arbitrary JavaScript, which may be executed in the browser of unsuspecting users, risking the exposure of sensitive information and potentially compromising user accounts.

References