CVE-2023-3884: Campcodes Beauty Salon Management System edit_product.php cross site scripting
A vulnerability has been found in Campcodes Beauty Salon Management System 1.0 and classified as problematic. This vulnerability affects unknown code of the file /admin/editproduct.php. The manipulation of the argument id leads to cross site scripting. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. VDB-235246 is the identifier assigned to this vulnerability.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2023-3884?
CVE-2023-3884 is classified as a problematic vulnerability affecting Campcodes Beauty Salon Management System version 1.0.
How does CVE-2023-3884 affect the system?
CVE-2023-3884 allows for cross site scripting via manipulation of the 'id' argument in the /admin/edit_product.php file.
Can CVE-2023-3884 be exploited remotely?
Yes, attackers can initiate exploitation of CVE-2023-3884 remotely by manipulating the vulnerable parameter.
How do I fix CVE-2023-3884?
To fix CVE-2023-3884, validate and sanitize input data, especially the 'id' parameter in the affected PHP file.
Which versions of the software are affected by CVE-2023-3884?
CVE-2023-3884 specifically affects version 1.0 of Campcodes Beauty Salon Management System.