Skip to content
OpenAdvisories
Low · 3.5 Public exploit CVE-2025-7840 EUVD-2025-21973GHSA-jj5h-f25w-8hv6

Campcodes Online Movie Theater Seat Reservation System Reserve Your Seat Page index.php cross site scripting

Published Jul 19, 2025 · Updated Jul 21, 2025 · Assigned by VulDB

Vendor: Campcodes Product: Online Movie Theater Seat Reservation System

Description

A vulnerability was found in Campcodes Online Movie Theater Seat Reservation System 1.0. It has been classified as problematic. This affects an unknown part of the file /index.php?page=reserve of the component Reserve Your Seat Page. The manipulation of the argument Firstname/Lastname leads to cross site scripting. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used.

Affected products

VendorProductAffectedFixed
Campcodes Online Movie Theater Seat Reservation System 1.0 —

Public exploits

Exploit or proof-of-concept code for this vulnerability is publicly available, which lowers the bar for attackers. Treat it as a reason to patch sooner.

Third-party code, not reviewed by us. Public PoCs are sometimes fake or contain malware. Read the code first and run it only in an isolated lab, against systems you are authorised to test.

GitHub 1 repository

  • byteReaper77/CVE-2025-7840 ★ 2 · Jul 20, 2025

    Proof‑of‑concept exploit for CVE‑2025‑7840 that injects malicious payloads into the Firstname parameter of a reservation form to trigger XSS

Sources: PoC-in-GitHub, Metasploit Framework, Exploit-DB — updated daily. Only links are listed; no exploit code is hosted here.

References