CVE-2025-10632: itsourcecode Online Petshop Management System Admin Dashboard availableframe.php cross site scripting
A security flaw has been discovered in itsourcecode Online Petshop Management System 1.0. The affected element is an unknown function of the file availableframe.php of the component Admin Dashboard. The manipulation of the argument name/address results in cross site scripting. It is possible to launch the attack remotely. The exploit has been released to the public and may be exploited.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2025-10632?
CVE-2025-10632 is classified as a medium severity vulnerability related to cross-site scripting.
How does CVE-2025-10632 affect the Online Petshop Management System?
CVE-2025-10632 allows an attacker to perform cross-site scripting by manipulating the argument in the availableframe.php file.
How can I fix CVE-2025-10632 in my Online Petshop Management System?
To fix CVE-2025-10632, validate and sanitize user inputs in the affected file to mitigate cross-site scripting risks.
What component of the Online Petshop Management System is affected by CVE-2025-10632?
CVE-2025-10632 affects the Admin Dashboard component of the Online Petshop Management System.
Is CVE-2025-10632 a zero-day vulnerability?
CVE-2025-10632 is not classified as a zero-day vulnerability, but it still poses a significant risk if left unaddressed.