A vulnerability was found in SourceCodester Best Salon Management System 1.0. It has been rated as problematic. This issue affects some unknown processing of the file /panel/edit-customer-detailed.php of the component Update Customer Details Page. The manipulation of the argument Name leads to cross site scripting. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used.
References
Link | Resource |
---|---|
https://github.com/Colorado-all/cve/blob/main/Best%20salon%20management%20system/xss-1.md | Exploit Third Party Advisory |
https://vuldb.com/?ctiid.315053 | Permissions Required |
https://vuldb.com/?id.315053 | Third Party Advisory VDB Entry |
https://vuldb.com/?submit.605986 | Third Party Advisory VDB Entry |
https://www.sourcecodester.com/ | Product |
https://github.com/Colorado-all/cve/blob/main/Best%20salon%20management%20system/xss-1.md | Exploit Third Party Advisory |
Configurations
History
09 Jul 2025, 15:28
Type | Values Removed | Values Added |
---|---|---|
First Time |
Mayurik best Salon Management System
Mayurik |
|
CVSS |
v2 : v3 : |
v2 : unknown
v3 : 5.4 |
CPE | cpe:2.3:a:mayurik:best_salon_management_system:1.0:*:*:*:*:*:*:* | |
References | () https://www.sourcecodester.com/ - Product | |
References | () https://vuldb.com/?submit.605986 - Third Party Advisory, VDB Entry | |
References | () https://vuldb.com/?id.315053 - Third Party Advisory, VDB Entry | |
References | () https://github.com/Colorado-all/cve/blob/main/Best%20salon%20management%20system/xss-1.md - Exploit, Third Party Advisory | |
References | () https://vuldb.com/?ctiid.315053 - Permissions Required |
07 Jul 2025, 19:15
Type | Values Removed | Values Added |
---|---|---|
New CVE |
Information
Published : 2025-07-07 18:15
Updated : 2025-07-09 15:28
NVD link : CVE-2025-7139
Mitre link : CVE-2025-7139
JSON object : View
Products Affected
mayurik
- best_salon_management_system
CWE
No CWE.