A cross-site scripting (XSS) vulnerability exists in Campcodes Complete Online Beauty Parlor Management System 1.0 in the /admin/customer-list.php file. The vulnerability arises from improper handling of the 'Name' argument, allowing remote attackers to inject malicious scripts. Exploit code is publicly available. The vulnerability has a low CVSS score of 2.4, indicating limited impact.