CVE-2025-1842

Name of the Vulnerable Software and Affected Versions AthleteMonitoring up to 20250302

Description A problematic vulnerability was found in AthleteMonitoring, affecting the /login.php file. The issue is related to the manipulation of the username argument, which leads to cross-site scripting. This can be initiated remotely. The exploit has been publicly disclosed.

Recommendations For AthleteMonitoring up to 20250302, as a temporary workaround, consider restricting access to the /login.php file or validating and sanitizing the username argument to prevent cross-site scripting attacks. At the moment, there is no information about a newer version that contains a fix for this vulnerability.