medium6.1
CVE-2025-65368
SparkyFitness v0.15.8.2 is vulnerable to Cross Site Scripting (XSS) via user input and LLM output.
Impact
SparkyFitness v0.15.8.2 is vulnerable to Cross Site Scripting (XSS) via user input and LLM output.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Codewithcj | Sparkyfitness | through 0.15.8.2 |