Hiruna vulnerabilities
Published CVEs affecting Hiruna products: 1 record(s), with severity, exploitation and fixes.
CVE-2025-50574
Medium · 6.1
CWE-79 Oct 30, 2025
Cross-site Scripting (XSS) in Hiruna Glamour Salon Management System
Cross-site scripting (XSS) vulnerability in blog-details.php in Hiruna Gallage's Glamour Salon Management System v1 allows remote attackers to inject arbitrary web script or HTML via the blog comment section parameter.