A weakness has been identified in SourceCodester Pet Grooming Management Software 1.0. This impacts an unknown function of the file /admin/operation/user.php. Executing manipulation of the argument website_image can lead to unrestricted upload. It is possible to launch the attack remotely. The exploit has been made available to the public and could be exploited.

References

• https://nvd.nist.gov/vuln/detail/CVE-2025-10427
• https://github.com/joinia/webray.com.cn/blob/main/Pet-grooming-management-software/petgrooming-upload-user.md
• https://vuldb.com/?ctiid.323861
• https://vuldb.com/?id.323861
• https://vuldb.com/?submit.647463
• https://www.sourcecodester.com