CVE-2025-7141: Improper Neutralization of Input During Web Page Generation

A vulnerability classified as problematic was found in SourceCodester Best Salon Management System 1.0. Affected by this vulnerability is an unknown functionality of the file /panel/editplan.php of the component Update Staff Page. The manipulation leads to cross site scripting. The attack can be...

CVE-2025-6862

CVE-2025-6862 affects SourceCodester Best Salon Management System 1.0. The vulnerability is an SQL injection in the file /panel/edit_plan.php via the editid parameter, exploitable remotely. Public exploit appears to be disclosed. Multiple sources concur on a critical impact with potential for con...

CVE-2025-6862: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability classified as critical has been found in SourceCodester Best Salon Management System 1.0. Affected is an unknown function of the file /panel/editplan.php. The manipulation of the argument editid leads to sql injection. It is possible to launch the attack remotely. The exploit has...