Description
SourceCodester Pet Grooming Management Software 1.0 is vulnerable to Cross Site Scripting (XSS) in /admin/profile.php via the fname (First Name) and lname (Last Name) fields.
References
www.youtube.com/...h?v=KopMozY6X5w&t=191s&ab_channel=MayuriK
github.com/...ty-Research/blob/main/CVE-2025-60318/README.md