CVE-2025-13484

15th percentile - higher than 15% of all known CVEs

A vulnerability was identified in Campcodes Complete Online Beauty Parlor Management System 1.0 affecting unknown code of the file /admin/customer-list.php. Manipulation of the Name argument leads to cross-site scripting; the attack may be initiated remotely and the exploit is publicly available and might be used.

A publicly available exploit enables remote script injection, potentially leading to admin session theft and takeover of the management panel.

Restrict access to the admin panel and implement input validation. Consider migrating to an actively maintained solution, as no confirmed fix exists for this version.