CVE-2025-9922

Name of the Vulnerable Software and Affected Versions Campcodes Sales and Inventory System version 1.0

Description A security issue exists in Campcodes Sales and Inventory System 1.0. Manipulation of the page argument in the /index.php file can lead to cross-site scripting. This attack can be launched remotely, and the exploit has been publicly disclosed.

Recommendations As a temporary workaround, consider restricting access to the /index.php file to minimize the risk of exploitation. Sanitize the page argument within the /index.php file to prevent the injection of malicious scripts.