Skip to main content

Student Grades Management System CVE-2025-64070

| EUVDEUVD-2025-200277 MEDIUM
Cross-site Scripting (XSS) (CWE-79)
2025-12-02 cve@mitre.org
XSS Student Grades Management System
5.4
CVSS 3.1 · NVD
Share

Severity by source

NVD PRIMARY
5.4 MEDIUM
AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N

Primary rating from NVD · only source for this CVE.

CVSS VectorNVD

CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N
Attack Vector
Network
Attack Complexity
Low
Privileges Required
Low
User Interaction
Required
Scope
Changed
Confidentiality
Low
Integrity
Low
Availability
None

Lifecycle Timeline

4
EUVD ID Assigned
Mar 15, 2026 - 14:04 euvd
EUVD-2025-200277
Analysis Generated
Mar 15, 2026 - 14:04 vuln.today
PoC Detected
Dec 03, 2025 - 20:13 vuln.today
Public exploit code
CVE Published
Dec 02, 2025 - 17:16 nvd
MEDIUM 5.4

DescriptionCVE.org

Sourcecodester Student Grades Management System v1.0 is vulnerable to Cross Site Scripting (XSS) in the Add New Subject Description field.

Analysis

Sourcecodester Student Grades Management System v1.0 is vulnerable to Cross Site Scripting (XSS) in the Add New Subject Description field.

Technical ContextAI

Cross-site scripting (XSS) allows injection of client-side scripts into web pages viewed by other users due to insufficient output encoding.

RemediationAI

Encode all user-supplied output contextually (HTML, JS, URL). Implement Content Security Policy (CSP) headers. Use HTTPOnly and Secure cookie flags.

More in Student Grades Management System

View all
CVE-2025-63892 MEDIUM POC
6.8 Nov 18

A vulnerability was determined in SourceCodester Student Grades Management System 1.0. Rated medium severity (CVSS 6.8),
CVE-2026-9484 LOW POC
2.1 May 25

Improper authorization in SourceCodester Student Grades Management System 1.0 allows authenticated remote attackers to m
CVE-2026-9483 LOW POC
2.1 May 25

Improper authorization in SourceCodester Student Grades Management System 1.0 permits authenticated remote attackers to

CVE-2026-9486 LOW POC
2.1 May 25

Cross-site request forgery in SourceCodester Student Grades Management System 1.0 enables remote attackers to perform un
CVE-2026-9485 LOW POC
2.0 May 25

Cross-site scripting in SourceCodester Student Grades Management System 1.0 allows a low-privileged authenticated attack
CVE-2025-12332 LOW POC
1.9 Oct 28

Stored cross-site scripting (XSS) vulnerability in SourceCodester Student Grades Management System 1.0 allows authentica
CVE-2025-11485 LOW POC
1.9 Oct 08

Stored cross-site scripting (XSS) in SourceCodester Student Grades Management System 1.0 allows authenticated administra

Same weakness CWE-79 – Cross-site Scripting (XSS)

View all
CVE-2020-3580 MEDIUM POC
6.1
CVE-2013-7389 MEDIUM POC
4.3
CVE-2021-25299 MEDIUM POC
6.1
CVE-2014-2120 MEDIUM
6.1
CVE-2023-40000 HIGH POC
8.3
CVE-2016-8581 MEDIUM POC
6.1
CVE-2013-5223 MEDIUM POC
5.4
CVE-2025-52367 MEDIUM POC
5.4

Same technique XSS

View all
CVE-2017-9248 CRITICAL POC
9.8
CVE-2020-3580 MEDIUM POC
6.1
CVE-2013-1710 CRITICAL POC
10.0
CVE-2013-7389 MEDIUM POC
4.3
CVE-2021-25299 MEDIUM POC
6.1
CVE-2014-2120 MEDIUM
6.1
CVE-2023-40000 HIGH POC
8.3
CVE-2024-52875 HIGH POC
8.8

Share

CVE-2025-64070 vulnerability details – vuln.today
Back

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy