CodeWithCJ

Records4All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical0CVSS 9.0–10.0

CVSS high1CVSS 7.0–8.9

Exploited now

CodeWithCJ records in CISA KEV

No CodeWithCJ vulnerabilities are listed in CISA KEV.

Products in the NVD configurations · select one to filter the records

1 record in Sparkyfitness · all components

TI-2025-40340 CVE-2025-65368 · GHSA-m77m-g5m4-wr4f

MEDIUM 60

SparkyFitness v0.15.8.2 is vulnerable to Cross Site Scripting (XSS) via user input and LLM output.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00251 Published 2026-01-15 No fix listed CWE-79