CVE-2025-6475
SourceCodester Student Result Management System Manage Students Module manage_students cross site scripting
- State
- Published
- Severity
- 4.8 Medium
- Published
- Jun 22, 2025
- Updated
- Jun 23, 2025
- Reserved
- Jun 21, 2025
Description
A vulnerability was found in SourceCodester Student Result Management System 1.0 and classified as problematic. This issue affects some unknown processing of the file /script/admin/manage_students of the component Manage Students Module. The manipulation leads to cross site scripting. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used.
Scores
| CVSS | Score | Vector | Source |
|---|---|---|---|
| 4.0 | 4.8 Medium | CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:P/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N/E:P | VulDB |
| 3.1 | 2.4 Low | CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:U/C:N/I:L/A:N/E:P/RL:X/RC:R | VulDB |
| 3.0 | 2.4 Low | CVSS:3.0/AV:N/AC:L/PR:H/UI:R/S:U/C:N/I:L/A:N/E:P/RL:X/RC:R | VulDB |
| 2.0 | 3.3 Low | AV:N/AC:L/Au:M/C:N/I:P/A:N/E:POC/RL:ND/RC:UR | VulDB |
Weaknesses
Affected Products
| Product | Versions |
|---|---|
Student Result Management SystemSourceCodester |
|
References
- VDB-313583 | SourceCodester Student Result Management System Manage Students Module manage_students cross site scriptingvdb-entry
- VDB-313583 | CTI Indicators (IOB, IOC, TTP, IOA)signaturepermissions-required
- Submit #600550 | SourceCodester Student Result Management System 1.0 Stored Cross Site Scriptingthird-party-advisory
- https://github.com/RaulPazemecxas/PoCVulDb/blob/main/README8.mdexploit
- https://www.sourcecodester.com/product
Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.