CVE-2025-61087
MediumCVSS 6.1Exploitation Probability (EPSS)
Low risk15th percentile - higher than 15% of all known CVEs
Summary
SourceCodester Pet Grooming Management Software 1.0 is vulnerable to Cross Site Scripting (XSS) via the Customer Name field under Customer Management Section.
Risk Assessment
An attacker can inject malicious JavaScript that executes in the user's browser, potentially leading to session hijacking or data theft.
Recommendation
Implement proper input validation and sanitization for the Customer Name field and apply output encoding.
Other vulnerabilities in SourceCodester Pet Grooming Management Software
See all- CVE-2025-60316Critical
SourceCodester Pet Grooming Management Software 1.0 is vulnerable to SQL Injection in admin/view_customer.php via the ID parameter. Attackers can inject arbitrary SQL queries.
- CVE-2026-75014High
A flaw has been found in SourceCodester Pet Grooming Management Software 1.0. This vulnerability affects unknown code of the file /admin/get_barcode_data.php. This manipulation of the argument barcode causes sql injection. The attack may be initiated remotely. The exploit has been published and may be used.
- CVE-2026-10254Medium
A flaw has been found in SourceCodester Pet Grooming Management Software 1.0. Affected is an unknown function of the file /admin/. This manipulation causes file and directory information exposure. The attack can be initiated remotely. The exploit has been published and may be used.
- CVE-2025-11051Medium
A cross-site request forgery (CSRF) vulnerability has been found in SourceCodester Pet Grooming Management Software 1.0. The vulnerability affects unknown code and can be exploited remotely.
- CVE-2025-10840Medium
A SQL injection vulnerability was identified in SourceCodester Pet Grooming Management Software 1.0 in the file /admin/print-payment.php. Manipulation of the argument sql111 allows remote attack initiation. The exploit has been made public and could be exploited.
- CVE-2025-10839Medium
A SQL injection vulnerability was found in SourceCodester Pet Grooming Management Software 1.0 in the file /admin/inv-print.php. Manipulation of the argument ID allows remote attack. The exploit has been released to the public and may be exploited.
- CVE-2025-10835Medium
A security flaw was discovered in SourceCodester Pet Grooming Management Software 1.0. The file /admin/view_payorder.php is affected; manipulation of the ID argument results in SQL injection. The attack can be initiated remotely and the exploit has been released.
- CVE-2025-10828Medium
A vulnerability has been detected in SourceCodester Pet Grooming Management Software 1.0. It affects an unknown part of the file /admin/edit.php. Manipulation of the argument ID leads to SQL injection. The attack can be launched remotely. The exploit has been publicly disclosed and may be used.
Original NVD description (English source)
SourceCodester Pet Grooming Management Software 1.0 is vulnerable to Cross Site Scripting (XSS) via the Customer Name field under Customer Management Section.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS