CVE-2025-10427

2.1 lowEPSS 0.4%

Low (2.1) in mayurik pet grooming management software. EPSS 0.4% chance of exploitation in the next 30 days.

A weakness has been identified in SourceCodester Pet Grooming Management Software 1.0. This impacts an unknown function of the file /admin/operation/user.php. Executing manipulation of the argument website_image can lead to unrestricted upload. It is possible to launch the attack remotely. The exploit has been made available to the public and could be exploited.

Severity

CVSS 4.0

2.1 low

CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P

CVSS 3.1

8.8 high

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

EPSS: 0.4% chance of exploitation in the next 30 days; higher than 36% of CVEs (scores of 2026-10-31)
CWEs: CWE-434, CWE-284
Published: 2025-09-15
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

mayurik:pet_grooming_management_software

References

https://github.com/joinia/webray.com.cn/blob/main/Pet-grooming-management-software/petgrooming-upload-user.md
https://vuldb.com/?ctiid.323861
https://vuldb.com/?id.323861
https://vuldb.com/?submit.647463
https://www.sourcecodester.com/

Check your stack JSON