CVE-2025-15188

A vulnerability was determined in Campcodes Complete Online Beauty Parlor Management System 1.0. This vulnerability affects unknown code of the file /admin/search-invoices.php. Executing a manipulation of the argument searchdata can lead to cross site scripting. The attack can be launched remotely. The exploit has been publicly disclosed and may be utilized.

Score

CVSS 4.0 4.8 Medium

Status

Modified - cna@vuldb.com

Published

2025-12-29

Last modified

2026-10-07

Weaknesses

CWE-79, CWE-94

Affected products

• Complete Online Beauty Parlor Management System (Campcodes)
• Online Beauty Parlor Management System (Campcodes)

References

• https://vuldb.com/?id.338573
• https://vuldb.com/?ctiid.338573
• https://vuldb.com/?submit.721868
• https://github.com/BUPT2025201/CVE/issues/1
• https://www.campcodes.com/