First published: Tue Jul 25 2023(Updated: )
A vulnerability has been found in Campcodes Beauty Salon Management System 1.0 and classified as problematic. This vulnerability affects unknown code of the file /admin/edit_product.php. The manipulation of the argument id leads to cross site scripting. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. VDB-235246 is the identifier assigned to this vulnerability.
Credit: cna@vuldb.com
Affected Software | Affected Version | How to fix |
---|---|---|
Campcodes Chic Beauty Salon | =1.0 |
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
CVE-2023-3884 is classified as a problematic vulnerability affecting Campcodes Beauty Salon Management System version 1.0.
CVE-2023-3884 allows for cross site scripting via manipulation of the 'id' argument in the /admin/edit_product.php file.
Yes, attackers can initiate exploitation of CVE-2023-3884 remotely by manipulating the vulnerable parameter.
To fix CVE-2023-3884, validate and sanitize input data, especially the 'id' parameter in the affected PHP file.
CVE-2023-3884 specifically affects version 1.0 of Campcodes Beauty Salon Management System.