PT-2025-43534 · Unknown · 17Gz International Student Service System

Published 2025-10-23 · Updated 2025-10-23 · CVE-2025-57240

Positive Technologies (AI Summary)

CVSS v3.1

6.1

Medium

Base vector

AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

Name of the Vulnerable Software and Affected Versions 17gz International Student service system version 1.0

Description A cross site scripting (XSS) issue exists in 17gz International Student service system version 1.0. This allows attackers to execute arbitrary code during the registration process. The issue involves the ability to inject malicious scripts into the system through the registration step.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

XSS

Weakness Enumeration

CWE-79

Related Identifiers

CVE-2025-57240

Affected Products

17Gz International Student Service System

References · 6

• https://nvd.nist.gov/vuln/detail/CVE-2025-57240 · Security Note
• https://t.me/CVEtracker/35588 · Telegram Post
• https://twitter.com/CVEnew/status/1981416446631850247 · Twitter Post
• https://github.com/samllpotato1/xss/blob/main/xss.txt · Note
• https://twitter.com/fernandokarl/status/1981439840508932190 · Twitter Post
• https://t.me/cveNotify/140107 · Telegram Post