CVE-2025-7144: SourceCodester Best Salon Management System Admin Profile Page admin-profile.php cross site scripting
A vulnerability has been found in SourceCodester Best Salon Management System 1.0 and classified as problematic. This vulnerability affects unknown code of the file /panel/admin-profile.php of the component Admin Profile Page. The manipulation of the argument Admin Name leads to cross site scripting. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2025-7144?
CVE-2025-7144 is classified as problematic due to its potential to facilitate cross-site scripting attacks.
How does CVE-2025-7144 affect the system?
CVE-2025-7144 affects the Admin Profile Page, allowing the manipulation of the Admin Name argument, which could lead to security breaches.
How do I fix CVE-2025-7144?
To fix CVE-2025-7144, ensure proper input validation and sanitization on the Admin Name argument in the /panel/admin-profile.php file.
Who is affected by CVE-2025-7144?
Any users of SourceCodester Best Salon Management System version 1.0 with an exposed Admin Profile Page could be affected by CVE-2025-7144.
Is there a patch available for CVE-2025-7144?
Currently, there is no specific patch released for CVE-2025-7144, so immediate remediation measures should be taken to mitigate risks.