4.8
/ 10
MEDIUM
CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:P/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N/E:P
Description
A weakness has been identified in Campcodes Complete Online Beauty Parlor Management System 1.0. The affected element is an unknown function of the file /admin/bwdates-reports-details.php. Executing manipulation of the argument fromdate can lead to cross site scripting. The attack may be launched remotely. The exploit has been made available to the public and could be exploited.
Basic Information
ID
CVE-2025-14991
Source
VulDB
Published
Dec 21, 2025 at 03:32
Affected Product
Vendor
Campcodes
Product
Complete Online Beauty Parlor Management System
Version
1.0
Affected Versions
Campcodes Complete Online Beauty Parlor Management System 1.0