PT-2025-41275 · Sourcecodester · Pet Grooming Management

Chuckbartowski7 · Published 2025-10-08 · Updated 2025-10-09 · CVE-2025-60318

Positive Technologies (AI Summary)

CVSS v3.1

6.1

Medium

Base vector

AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

Name of the Vulnerable Software and Affected Versions SourceCodester Pet Grooming Management Software version 1.0

Description The software is susceptible to Cross Site Scripting (XSS) attacks. The issue occurs in the '/admin/profile.php' component through the fname (First Name) and lname (Last Name) fields. Successful exploitation could allow an attacker to inject malicious scripts into the web page viewed by other users.

Recommendations Update to a newer version that contains a fix for this vulnerability. Sanitize the input received from the fname and lname parameters in the '/admin/profile.php' component.

Exploit

Fix

XSS

Weakness Enumeration

CWE-79

Related Identifiers

CVE-2025-60318

Affected Products

Pet Grooming Management

References · 7

• 🔥 https://github.com/ChuckBartowski7/Vulnerability-Research/blob/main/CVE-2025-60318/README.md · Exploit
• https://osv.dev/vulnerability/CVE-2025-60318 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2025-60318 · Security Note
• https://youtube.com/watch?v=KopMozY6X5w&t=191s&ab_channel=MayuriK · Note
• https://t.me/CVEtracker/34460 · Telegram Post
• https://twitter.com/VulmonFeeds/status/1976092751377674501 · Twitter Post
• https://twitter.com/CVEnew/status/1975977617594405307 · Twitter Post