[ CVE-2026-4316 · Published 26 Oct 2026 ]
Vulnerability in Zuinq Studio IsMyGym
CVSS 5.1
EPSS <1%No fix listed yet
[ Description ]Official description
Reflected Cross-Site Scripting (XSS) in Gym Management Software IsMyGym by Zuinq Studio affecting the reservation endpoint where the 'ret' parameter is reflected in the HTTP response without any proper sanitization. Successfull explotation of this vulnerability could allow an attacker to inject arbitrary JavaScript code executed in the context of the victim’s browser.
[ Fixes ]Fixes and patches
No fix or interim patch is linked from our sources yet. Check the vendor references below and limit exposure of affected systems until a fix is available.