CVE-2025-15188

LowCVSS 2.4

Published: 29/12/2025(UTC)Updated: 07/10/2026(UTC)Translated: 06/10/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.24%

14th percentile - higher than 14% of all known CVEs

Summary

A vulnerability was determined in Campcodes Complete Online Beauty Parlor Management System 1.0 affecting unknown code in /admin/search-invoices.php. Manipulating the searchdata argument can lead to cross site scripting. The attack can be launched remotely and the exploit has been publicly disclosed.

Risk Assessment

The XSS vulnerability could allow an attacker to execute scripts in an administrator's browser and steal sessions or data. The publicly available exploit increases the risk of exploitation.

Recommendation

Implement validation and sanitization of the searchdata argument and update the system to a patched version.

Other vulnerabilities in Campcodes Complete Online Beauty Parlor Management System

CVE-2025-13484Low
A vulnerability was identified in Campcodes Complete Online Beauty Parlor Management System 1.0 affecting unknown code of the file /admin/customer-list.php. Manipulation of the Name argument leads to cross-site scripting; the attack may be initiated remotely and the exploit is publicly available and might be used.

Original NVD description (English source)

A vulnerability was determined in Campcodes Complete Online Beauty Parlor Management System 1.0. This vulnerability affects unknown code of the file /admin/search-invoices.php. Executing a manipulation of the argument searchdata can lead to cross site scripting. The attack can be launched remotely. The exploit has been publicly disclosed and may be utilized.

Vulnerability data from NVD (NIST) · CISA KEV · EPSS