CVE-2025-13484: Campcodes Complete Online Beauty Parlor Management System customer-list.php cross site scripting
A vulnerability was identified in Campcodes Complete Online Beauty Parlor Management System 1.0. This vulnerability affects unknown code of the file /admin/customer-list.php. The manipulation of the argument Name leads to cross site scripting. The attack may be initiated remotely. The exploit is publicly available and might be used.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2025-13484?
CVE-2025-13484 has been classified as a cross-site scripting (XSS) vulnerability, which can lead to the exposure of sensitive information and user session hijacking.
How do I fix CVE-2025-13484?
To fix CVE-2025-13484, sanitize and encode user input in the affected file /admin/customer-list.php to prevent XSS attacks.
What software is affected by CVE-2025-13484?
CVE-2025-13484 affects Campcodes Complete Online Beauty Parlor Management System version 1.0.
Can CVE-2025-13484 be exploited remotely?
Yes, CVE-2025-13484 can be exploited remotely by manipulating the Name parameter in the application.
What is the potential impact of exploiting CVE-2025-13484?
Exploiting CVE-2025-13484 can lead to unauthorized access to user sessions and the execution of malicious scripts in the user's browser.