CVE-2026-124637
Stored Cross-Site Scripting (XSS) in Tankuam Places
CVSS Score
0.0
EPSS Score
0.0%
EPSS Percentile
0th
A stored Cross-Site Scripting (XSS) vulnerability was identified in the profile editing form, in the parameters: cliNom and cliCognoms, in a request to https://www.luxorgymtarrega.com/dadespersonals/modificarClient/ID. User-provided data is neither validated nor escaped before being displayed in the HTML response and stored in the database, allowing arbitrary JavaScript code to be executed in the victim’s browser.
| CWE | CWE-79 |
| Vendor | kompini |
| Product | tankuam places |
| Published | Nov 9, 2026 |
Stay Ahead of the Next One
Get instant alerts for kompini tankuam places
Be the first to know when new unknown vulnerabilities affecting kompini tankuam places are published — delivered to Slack, Telegram or Discord.
Get Free Alerts →
Free · No credit card · 60 sec setup
Affected Versions
Kompini / Tankuam Places
versions prior to app.00007.00005 (December 2025)
References
Credits
Arnau Domènech Bravin