wger-project — Vulnerabilities & Security Advisories 6

The wger-project is a fitness management platform enabling users to track workouts, nutrition, and weight progress. Historically, it has been susceptible to multiple vulnerability classes including cross-site scripting (XSS), remote code execution (RCE), and privilege escalation, with six CVEs documented. These vulnerabilities often stem from insufficient input validation and improper access controls in its web interface. The project maintains an open-source nature with regular security updates, though its widespread deployment in fitness environments necessitates ongoing vigilance against exploitation. No major security incidents have been widely reported, but the presence of multiple CVEs indicates consistent security challenges requiring proactive mitigation by implementers.