Medium severity · published Dec 21, 2025
CVE-2025-14991
Campcodes Complete Online Beauty Parlor Management System bwdates-reports-details.php cross site scripting
4.8
CVSS
0.2%
EPSS
No
On KEV
Description
A weakness has been identified in Campcodes Complete Online Beauty Parlor Management System 1.0. The affected element is an unknown function of the file /admin/bwdates-reports-details.php. Executing a manipulation of the argument fromdate can lead to cross site scripting. The attack may be launched remotely. The exploit has been made available to the public and could be used for attacks.
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N
Attack vector
Network
Complexity
Low
Privileges
High
User interaction
Required
Confidentiality
Low
Integrity
Low
Availability
None
Scope
Changed
Exploitation
Is it being used?
Exploit prediction (EPSS)0.2% · higher than 15% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
CO
Complete Online Beauty Parlor Management System · Campcodes
1.0 · source: vendor, NVD
Affected product
CO
Complete Online Beauty Parlor Management System
Campcodes
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2025-14991
CVE.org
https://www.cve.org/CVERecord?id=CVE-2025-14991
Exploit
https://github.com/funnnxxx/my-cve/issues/1
Permissions Required
https://vuldb.com/?ctiid.337685
Third Party Advisory
https://vuldb.com/?id.337685
Third Party Advisory
https://vuldb.com/?submit.718458
Product
https://www.campcodes.com/
More from Complete Online Beauty Parlor Management System
9.8
CVE-2025-14990
Campcodes Complete Online Beauty Parlor Management System view-appointment.php sql injection
9.8
CVE-2025-14989
Campcodes Complete Online Beauty Parlor Management System search-invoices.php sql injection
6.5
CVE-2024-2770
A vulnerability was found in Campcodes Complete Online Beauty Parlor Management System 1.0
6.5
CVE-2024-2769
A vulnerability was detected in Campcodes Complete Online Beauty Parlor Management System 1.0
6.5
CVE-2024-2768
A vulnerability was found in Campcodes Complete Online Beauty Parlor Management System 1.0