CVE-2025-50574
Essential information
- Published
- 30/10/2025 15:15
- Modified
- 30/10/2025 15:15
- Author
- —
- Creator
- —
- CISA KEV
- No
- CWE
- —
- CVSS vector
- — — —
Description
Cross-site scripting (XSS) vulnerability in blog-details.php in Hiruna Gallage's Glamour Salon Management System v1 allows remote attackers to inject arbitrary web script or HTML via the blog comment section parameter.
NVD status
- Status
- Received — CVE has been recently published to the CVE List and has been received by the NVD.
- Source
- [email protected]
- NVD
- View on NVD
Affected products (CPE)
| Product | CPE |
|---|---|
| hiruna gallage / glamour salon management system | cpe:2.3:a:hiruna_gallage:glamour_salon_management_system:*:*:*:*:*:*:*:* |