A weakness has been identified in Campcodes Complete Online Beauty Parlor Management System 1.0. The affected element is an unknown function of the file /admin/bwdates-reports-details.php. Executing manipulation of the argument fromdate can lead to cross site scripting. The attack may be launched remotely. The exploit has been made available to the public and could be exploited.
References
| Link | Resource |
|---|---|
| https://github.com/funnnxxx/my-cve/issues/1 | Exploit Issue Tracking |
| https://vuldb.com/?ctiid.337685 | Permissions Required VDB Entry |
| https://vuldb.com/?id.337685 | Third Party Advisory VDB Entry |
| https://vuldb.com/?submit.718458 | Third Party Advisory VDB Entry |
| https://www.campcodes.com/ | Product |
Configurations
Configuration 1 (hide)
|
History
30 Dec 2025, 18:16
| Type | Values Removed | Values Added |
|---|---|---|
| References | () https://github.com/funnnxxx/my-cve/issues/1 - Exploit, Issue Tracking | |
| References | () https://vuldb.com/?ctiid.337685 - Permissions Required, VDB Entry | |
| References | () https://vuldb.com/?id.337685 - Third Party Advisory, VDB Entry | |
| References | () https://vuldb.com/?submit.718458 - Third Party Advisory, VDB Entry | |
| References | () https://www.campcodes.com/ - Product | |
| First Time |
Campcodes complete Online Beauty Parlor Management System
Campcodes |
|
| CPE | cpe:2.3:a:campcodes:complete_online_beauty_parlor_management_system:1.0:*:*:*:*:*:*:* |
21 Dec 2025, 04:16
| Type | Values Removed | Values Added |
|---|---|---|
| New CVE |
Information
Published : 2025-12-21 04:16
Updated : 2025-12-30 18:16
NVD link : CVE-2025-14991
Mitre link : CVE-2025-14991
CVE.ORG link : CVE-2025-14991
JSON object : View
Products Affected
campcodes
- complete_online_beauty_parlor_management_system