CVE-2025-10631

CVE-2025-10631 is a Cross-Site Scripting (XSS) vulnerability found in the itsourcecode Online Petshop Management System 1.0, specifically within the addcnp.php component's "Available Products Page." This flaw allows remote attackers to inject malicious scripts by manipulating the 'name' or 'description' arguments. The vulnerability has a CVSS score of 5.4 (Medium), indicating a network-based attack with low attack complexity, requiring user interaction, and resulting in low impact to confidentiality and integrity. While the exploit is publicly available, there is no evidence of active exploitation, and it is not listed in CISA's KEV catalog. Despite public exploit availability, there is minimal community discussion or media coverage surrounding this CVE, suggesting it has not garnered significant attention from researchers or threat actors.