wger-project

Records21All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical2CVSS 9.0–10.0

CVSS high7CVSS 7.0–8.9

Exploited now

wger-project records in CISA KEV

No wger-project vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Wger 6 records HIGH Workout Manager 2 records HIGH

Records

2 records in Workout Manager · all components

TI-2023-20093 CVE-2023-38759 · GHSA-wrw3-qmqw-4x9w

Cross Site Request Forgery (CSRF) vulnerability in wger Project wger Workout Manager…

HIGH 73

Cross Site Request Forgery (CSRF) vulnerability in wger Project wger Workout Manager 2.2.0a3 allows a remote attacker to gain privileges via the user-management feature in the gym/views/gym.py, templates/gym/reset_user_p…

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.00398 Published 2023-08-08 No fix listed CWE-352

TI-2023-20092 CVE-2023-38758 · GHSA-8m9p-3926-gffr

Cross Site Scripting vulnerability in wger Project wger Workout Manager v.2.2.0a3 allows…

MEDIUM 58

Cross Site Scripting vulnerability in wger Project wger Workout Manager v.2.2.0a3 allows a remote attacker to gain privileges via the license_author field in the add-ingredient function in the templates/ingredients/view.…

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00581 Published 2023-08-08 No fix listed CWE-79

Open these records in search →

Critical	2
High	7
Medium	11
Low	1
No CVSS	0