CVE-2023-7150: Campcodes Chic Beauty Salon Product product-list.php unrestricted upload

Severity: high (CVSS 8.8 v3.1)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.6% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2023-12-29 · updated 2026-06-17
Weakness: CWE-434

Description

A vulnerability classified as critical was found in Campcodes Chic Beauty Salon 20230703. Affected by this vulnerability is an unknown functionality of the file product-list.php of the component Product Handler. The manipulation leads to unrestricted upload. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. The identifier VDB-249157 was assigned to this vulnerability.

Affected products

Campcodes Chic Beauty Salon: 20230703

References

https://github.com/laoquanshi/-Arbitrary-file-upload-vulnerability-
https://github.com/laoquanshi/Chic-Vulnerability-
https://vuldb.com/?ctiid.249157
https://vuldb.com/?id.249157
https://github.com/laoquanshi/-Arbitrary-file-upload-vulnerability-
https://github.com/laoquanshi/Chic-Vulnerability-
https://vuldb.com/?ctiid.249157
https://vuldb.com/?id.249157

Get alerted when CVE-2023-7150 or the next vulnerability affects your stack