CVE-2025-10632 MEDIUM

CVE-2025-10632: itsourcecode Online Petshop Management System Admin Dashboard availableframe.php cross site scripting

Vendor Itsourcecode

Product Online Petshop Management System

Weakness CWE-79 · XSS

Published September 18, 2025

Last update September 18, 2025

View on NVD All CVEs

CVSS base score

5.1/10

Attack vector Network

Attack complexity Low

Privileges required Low

User interaction —

Confidentiality —

Integrity —

CVSS vector

CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:P/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N/E:P

What the vulnerability does

01Description

A security flaw has been discovered in itsourcecode Online Petshop Management System 1.0. The affected element is an unknown function of the file availableframe.php of the component Admin Dashboard. The manipulation of the argument name/address results in cross site scripting. It is possible to launch the attack remotely. The exploit has been released to the public and may be exploited.

Key dates

02Disclosure timeline

September 18, 2025 CVE published

September 18, 2025 Record updated

External resources

03References

NVD — National Vulnerability Database https://nvd.nist.gov/vuln/detail/CVE-2025-10632 CWE — Common Weakness Enumeration https://cwe.mitre.org/data/definitions/79.html