VULNERABILITY INTELLIGENCE

CVE-2025-10688

CVSS score9.8 CRITICAL

EPSS probability0.48%

CISA KEVNot currently listed

Published2025-09-18

Last modified2026-06-17

Description

A vulnerability was determined in SourceCodester Pet Grooming Management Software 1.0. This vulnerability affects unknown code of the file /admin/operation/paid.php. This manipulation of the argument inv_no/insta_amt causes sql injection. The attack can be initiated remotely. The exploit has been publicly disclosed and may be utilized.