CVE-2025-7143: SourceCodester Best Salon Management System Update Tax Page edit-tax.php cross site scripting
A vulnerability, which was classified as problematic, was found in SourceCodester Best Salon Management System 1.0. This affects an unknown part of the file /panel/edit-tax.php of the component Update Tax Page. The manipulation of the argument Tax Name leads to cross site scripting. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Configuration
Update /panel/edit-tax.php so that the Tax Name argument cannot be used to inject Cross-Site Scripting (XSS) payloads—apply appropriate input validation and output encoding for Tax Name when rendering it back in the page.
SourceCodester Best Salon Management System (Update Tax Page) Tax Name input handling in /panel/edit-tax.php (edit-tax.php) = Prevent injection by properly validating and output-encoding the Tax Name argument to block XSS
Event History
Frequently Asked Questions
What is the severity of CVE-2025-7143?
CVE-2025-7143 is classified as a problematic vulnerability due to its potential for cross-site scripting attacks.
How do I fix CVE-2025-7143?
To fix CVE-2025-7143, sanitize and validate user input on the Update Tax Page to prevent cross-site scripting.
What component is affected by CVE-2025-7143?
CVE-2025-7143 affects the Update Tax Page component of the SourceCodester Best Salon Management System.
What type of attack does CVE-2025-7143 allow?
CVE-2025-7143 allows attackers to exploit a cross-site scripting vulnerability.
Which version of SourceCodester Best Salon Management System is impacted by CVE-2025-7143?
CVE-2025-7143 impacts SourceCodester Best Salon Management System version 1.0.