CVE-2023-3890

A vulnerability classified as problematic has been found in Campcodes Beauty Salon Management System 1.0. This affects an unknown part of the file /admin/edit-accepted-appointment.php. The manipulation of the argument id leads to cross site scripting. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-235251.

• CWE-79

• https://github.com/E1CHO/cve_hub/blob/main/Beauty%20Salon%20Management%20System/Beauty%20Salon%20Management%20System%20-%20vuln%2021.pdfExploit, Third Party Advisory
• https://vuldb.com/?ctiid.235251Permissions Required, Third Party Advisory
• https://vuldb.com/?id.235251Third Party Advisory
• https://github.com/E1CHO/cve_hub/blob/main/Beauty%20Salon%20Management%20System/Beauty%20Salon%20Management%20System%20-%20vuln%2021.pdfExploit, Third Party Advisory
• https://vuldb.com/?ctiid.235251Permissions Required, Third Party Advisory
• https://vuldb.com/?id.235251Third Party Advisory

Published

Jul 25, 2023

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2023-38890Online Shopping Portal Project 3.1 allows remote attackers t…8.8
• CVE-2023-38891SQL injection vulnerability in Vtiger CRM v.7.5.0 allows a r…8.8
• CVE-2023-38894A Prototype Pollution issue in Cronvel Tree-kit v.0.7.4 and …9.8
• CVE-2023-38896An issue in Harrison Chase langchain v.0.0.194 and before al…9.8
• CVE-2023-38898An issue in Python cpython v.3.7 allows an attacker to obtai…5.3
• CVE-2023-38899SQL injection vulnerability in berkaygediz O_Blog v.1.0 allo…7.8
• CVE-2023-38902A command injection vulnerability in RG-EW series home route…8.8
• CVE-2023-38904A Cross Site Scripting (XSS) vulnerability in Netlify CMS v.…5.4
• CVE-2023-38905SQL injection vulnerability in Jeecg-boot v.3.5.0 and before…5.5
• CVE-2023-38906An issue in TPLink Smart Bulb Tapo series L530 1.1.9, L510E …6.5
• CVE-2023-38907An issue in TPLink Smart Bulb Tapo series L530 before 1.2.4,…7.5
• CVE-2023-38908An issue in TPLink Smart Bulb Tapo series L530 before 1.2.4,…6.5