CVE-2025-60318

MediumCVSS 6.1

Published: 08/10/2025(UTC)Updated: 05/11/2026(UTC)Translated: 05/11/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.24%

15th percentile - higher than 15% of all known CVEs

Summary

SourceCodester Pet Grooming Management Software 1.0 is vulnerable to Cross-Site Scripting (XSS) in /admin/profile.php via the fname (First Name) and lname (Last Name) fields.

Risk Assessment

An attacker could inject malicious JavaScript that may steal session data or perform actions on behalf of the user.

Recommendation

Implement input validation and output encoding, and update the application to a patched version.

Other vulnerabilities in Pet Grooming Management Software

CVE-2026-7447Medium
A flaw has been found in SourceCodester Pet Grooming Management Software 1.0 in /admin/update_customer.php, where manipulation of the type/length/business parameters leads to SQL injection. The attack can be carried out remotely and the exploit has been published.

Original NVD description (English source)

SourceCodester Pet Grooming Management Software 1.0 is vulnerable to Cross Site Scripting (XSS) in /admin/profile.php via the fname (First Name) and lname (Last Name) fields.

Vulnerability data from NVD (NIST) · CISA KEV · EPSS