CVE-2025-11051
MediumCVSS 4.3Exploitation Probability (EPSS)
Low risk15th percentile - higher than 15% of all known CVEs
Summary
A cross-site request forgery (CSRF) vulnerability has been found in SourceCodester Pet Grooming Management Software 1.0. The vulnerability affects unknown code and can be exploited remotely.
Risk Assessment
An attacker could trick a logged-in user into performing unwanted actions in the application, potentially leading to unauthorized data changes.
Recommendation
Update the software to the latest available version and implement anti-CSRF tokens and Origin/Referer header validation.
Other vulnerabilities in SourceCodester Pet Grooming Management Software
See all- CVE-2026-75014High
A flaw has been found in SourceCodester Pet Grooming Management Software 1.0. This vulnerability affects unknown code of the file /admin/get_barcode_data.php. This manipulation of the argument barcode causes sql injection. The attack may be initiated remotely. The exploit has been published and may be used.
- CVE-2026-10254Medium
A flaw has been found in SourceCodester Pet Grooming Management Software 1.0. Affected is an unknown function of the file /admin/. This manipulation causes file and directory information exposure. The attack can be initiated remotely. The exploit has been published and may be used.
- CVE-2025-10840Medium
A SQL injection vulnerability was identified in SourceCodester Pet Grooming Management Software 1.0 in the file /admin/print-payment.php. Manipulation of the argument sql111 allows remote attack initiation. The exploit has been made public and could be exploited.
- CVE-2025-10839Medium
A SQL injection vulnerability was found in SourceCodester Pet Grooming Management Software 1.0 in the file /admin/inv-print.php. Manipulation of the argument ID allows remote attack. The exploit has been released to the public and may be exploited.
Original NVD description (English source)
A vulnerability has been found in SourceCodester Pet Grooming Management Software 1.0. This vulnerability affects unknown code. The manipulation leads to cross-site request forgery. The attack is possible to be carried out remotely.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS