CVE-2025-15214: Campcodes Park Ticketing System admin_class.php save_pricing cross site scripting
A vulnerability was found in Campcodes Park Ticketing System 1.0. The impacted element is the function save_pricing of the file admin_class.php. The manipulation of the argument name/ride results in cross site scripting. The attack may be performed from remote. The exploit has been made public and could be used.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2025-15214?
CVE-2025-15214 is classified as a high severity vulnerability due to its potential for cross-site scripting attacks.
How do I fix CVE-2025-15214?
To fix CVE-2025-15214, sanitize user input in the 'save_pricing' function to prevent injection of malicious scripts.
What systems are affected by CVE-2025-15214?
CVE-2025-15214 affects Campcodes Park Ticketing System version 1.0.
How can CVE-2025-15214 be exploited?
CVE-2025-15214 can be exploited remotely by manipulating the 'Name' argument in the 'save_pricing' function.
What are the risks associated with not addressing CVE-2025-15214?
Failing to address CVE-2025-15214 could lead to unauthorized script execution in users' browsers, compromising user data and website integrity.