CVE-2025-10428 MEDIUM

CVE-2025-10428: SourceCodester Pet Grooming Management Software Setting seo_setting.php unrestricted upload

Vendor Sourcecodester
Product Pet Grooming Management Software
Weakness CWE-434 · Unrestricted file upload
Published September 15, 2025
Last update September 15, 2025
View on NVD All CVEs

CVSS base score

5.3/10
Attack vector Network
Attack complexity Low
Privileges required Low
User interaction None
Confidentiality —
Integrity —

CVSS vector

CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P

What the vulnerability does

01Description

A security vulnerability has been detected in SourceCodester Pet Grooming Management Software 1.0. Affected is an unknown function of the file /admin/seo_setting.php of the component Setting Handler. The manipulation of the argument website_image leads to unrestricted upload. The attack can be initiated remotely. The exploit has been disclosed publicly and may be used.

Key dates

02Disclosure timeline

September 15, 2025 CVE published
September 15, 2025 Record updated

Related vulnerabilities

04Related CVE

CVE-2025-68001 WordPress g-FFL Checkout plugin <= 2.1.0 - Arbitrary File Upload vulnerability CVE-2023-50386 Apache Solr: Backup/Restore APIs allow for deployment of executables in malicious ConfigSets CVE-2025-0399 StarSea99 starsea-mall uploadController.java UploadController unrestricted upload CVE-2021-34624 ProfilePress 3.0 - 3.1.3 - Arbitrary File Upload in File Uploader Component CVE-2025-60219 WordPress WooCommerce Designer Pro Plugin <= 1.9.24 - Arbitrary File Upload Vulnerability