CVE-2025-63298HIGH 8.2EPSS p39.2%

CVE-2025-63298CVE-2025-63298

Description

A path traversal vulnerability was identified in SourceCodester Pet Grooming Management System 1.0, affecting the admin/manage_website.php component. An authenticated user with administrative privileges can leverage this flaw by submitting a specially crafted POST request, enabling the deletion of arbitrary files on the web server or underlying operating system.

Scoring

CVSS 3.18.2 (HIGH)
VectorCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H
EPSS0.48% probability of exploitation · percentile 39.2% · 2026-08-03T12:00:16Z
Published2025-10-30
Last modified2025-11-06

Underlying weaknesses· 1

CWE-24

References

  1. https://github.com/z3rObyte/CVE-2025-63298
  2. https://www.sourcecodester.com/sites/default/files/download/mayuri_k/petgrooming_erp.zip

1

TypeTargetConfidenceTier
WeaknessPath Traversal: '../filedir'cwe-240%live

Related by meaning· 6

Nearest entities by semantic similarity across the cs-graph corpus.

CVE
CVE-2026-10254
CVE
CVE-2025-10085
CVE
CVE-2025-10427
CVE
CVE-2025-10083
CVE
CVE-2025-10428
CVE
CVE-2025-10828
Sourced from NVD + FIRST.org EPSS. Curated for EU compliance use cases by Adam Lundqvist, Founder at SQUR.