CVE-2025-63298

High · 8.2

CVSS

8.2

EPSS

0.5%

Published

Oct 30, 2025

CISA due date

—

The record

A path traversal vulnerability was identified in SourceCodester Pet Grooming Management System 1.0, affecting the admin/manage_website.php component. An authenticated user with administrative privileges can leverage this flaw by submitting a specially crafted POST request, enabling the deletion of arbitrary files on the web server or underlying operating system.

Affected packages

Ecosystem	Package	Introduced	Fixed