{"id":7749,"date":"2025-07-07T16:11:47","date_gmt":"2025-07-07T16:11:47","guid":{"rendered":"http:\/\/localhost\/?p=7749"},"modified":"2025-07-07T16:11:47","modified_gmt":"2025-07-07T16:11:47","slug":"sourcecodester-best-salon-management-system-admin-profile-page-admin-profilephp-cross-site-scripting","status":"publish","type":"post","link":"https:\/\/zero.redgem.net\/?p=7749","title":{"rendered":"SourceCodester Best Salon Management System Admin Profile Page admin-profile.php cross site scripting"},"content":{"rendered":"
\n

CVE Details<\/h2>\n
\n
\n

Basic Information<\/h3>\n\n\n\n\n\n
Title<\/th>\nSourceCodester Best Salon Management System Admin Profile Page admin-profile.php cross site scripting<\/td>\n<\/tr>\n
Type<\/th>\ncve<\/td>\n<\/tr>\n
Published<\/th>\n2025-07-07T20:32:06.290Z<\/td>\n<\/tr>\n
Modified<\/th>\n2025-07-07T20:56:47.976Z<\/td>\n<\/tr>\n<\/table>\n<\/div>\n
\n

Product Information<\/h3>\n\n\n\n\n
Vendor<\/th>\nSourceCodester<\/td>\n<\/tr>\n
Product<\/th>\nBest Salon Management System<\/td>\n<\/tr>\n
Version<\/th>\n1.0<\/td>\n<\/tr>\n<\/table>\n<\/div>\n<\/div>\n
\n

CVSS Information<\/h3>\n\n\n\n
Base Score<\/th>\n4.8 (MEDIUM)<\/td>\n<\/tr>\n
Attack Vector<\/th>\nCVSS:4.0\/AV:N\/AC:L\/AT:N\/PR:H\/UI:P\/VC:N\/VI:L\/VA:N\/SC:N\/SI:N\/SA:N\/E:P<\/td>\n<\/tr>\n<\/table>\n<\/div>\n
\n

AI Analysis<\/h3>\n\n\n\n\n\n\n
AI Description<\/th>\nA cross-site scripting (XSS) vulnerability was discovered in the Admin Profile Page of SourceCodester’s Best Salon Management System version 1.0. This vulnerability allows remote attackers to inject malicious scripts via the Admin Name field, potentially leading to unauthorized actions. The issue is considered medium severity due to its impact, but the product’s niche usage may limit its overall risk.<\/td>\n<\/tr>\n
AI Severity<\/th>\nMedium<\/td>\n<\/tr>\n
AI Vendor<\/th>\nSourceCodester<\/td>\n<\/tr>\n
AI Product<\/th>\nBest Salon Management System<\/td>\n<\/tr>\n
AI Version<\/th>\n1.0<\/td>\n<\/tr>\n<\/table>\n<\/div>\n
\n

Affected Products<\/h4>\n