Skip to content
OpenAdvisories

Archive

21 December 2025

Vulnerabilities first published on this day (UTC), newest first.

2 results · Clear filters · Feed

  • Low 2.4

    Campcodes Complete Online Beauty Parlor Management System bwdates-reports-details.php cross site scripting

    A weakness has been identified in Campcodes Complete Online Beauty Parlor Management System 1.0. The affected element is an unknown function of the file /admin/bwdates-reports-details.php. Executing a manipulation of the argument fromdate can lead to cross si…

  • Low 2.7

    Migration, Backup, Staging – WPvivid Backup & Migration <= 0.9.120 - Authenticated (Admin+) Arbitrary Directory Creation

    The Migration, Backup, Staging – WPvivid Backup & Migration plugin for WordPress is vulnerable to arbitrary directory creation in all versions up to, and including, 0.9.120. This is due to the check_filesystem_permissions() function not properly restricting t…