CVE-2025-15214

A vulnerability was found in Campcodes Park Ticketing System 1.0. The impacted element is the function save_pricing of the file admin_class.php. The manipulation of the argument name/ride results in cross site scripting. The attack may be performed from remote. The exploit has been made public and could be used.

Score

CVSS 4.0 4.8 Medium

Status

Analyzed - cna@vuldb.com

Published

2025-12-30

Last modified

2026-10-07

Weaknesses

CWE-79, CWE-94

Affected products

• Park Ticketing System (Campcodes)

References

• https://vuldb.com/?id.338599
• https://vuldb.com/?ctiid.338599
• https://vuldb.com/?submit.725104
• https://vuldb.com/?submit.728898
• https://github.com/dobkill/CVE/issues/2
• https://www.campcodes.com/