CVE-2025-13484

LOW

Campcodes Beauty Parlor Management System 1.0 - XSS via Name Parameter in /admin/customer-list.php

Title source: llm

Description

A vulnerability was identified in Campcodes Complete Online Beauty Parlor Management System 1.0. This vulnerability affects unknown code of the file /admin/customer-list.php. The manipulation of the argument Name leads to cross site scripting. The attack may be initiated remotely. The exploit is publicly available and might be used.

References (5)

Core 5

Core References

Third Party Advisory, VDB Entry vdb-entry technical-description

https://vuldb.com/?id.333084

Permissions Required, VDB Entry signature permissions-required

https://vuldb.com/?ctiid.333084

Third Party Advisory, VDB Entry third-party-advisory

https://vuldb.com/?submit.696054

Exploit, Issue Tracking, Third Party Advisory exploit issue-tracking

https://github.com/Abxery/cveee/issues/8

Product product

https://www.campcodes.com/

Scores

CVSS v3 2.4

EPSS 0.0003

EPSS Percentile 9.6%

Attack Vector NETWORK

CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:U/C:N/I:L/A:N

CISA SSVC

Vulnrichment

Exploitation poc

Automatable no

Technical Impact partial

Details

CWE

CWE-79 CWE-94

Status published

Products (1)

campcodes/online_beauty_parlor_management_system 1.0

Published Nov 20, 2025

Tracked Since Feb 18, 2026