PT-2025-47319 · Sourcecodester · Sourcecodester Student Management System

Ankitkumar7 · Published 2025-11-18 · Updated 2025-11-20 · CVE-2025-13349

Positive Technologies (AI Summary)

CVSS v3.1

5.4

Medium

Base vector

AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N

Name of the Vulnerable Software and Affected Versions SourceCodester Student Grades Management System version 1.0

Description A flaw exists in SourceCodester Student Grades Management System 1.0 related to the processing of the /grades.php file within the Add New Grade Page component. Manipulation of the Remarks argument can lead to cross site scripting. The exploit for this issue has been publicly disclosed.

Recommendations Apply any available updates or patches for version 1.0. As a temporary workaround, consider sanitizing the Remarks input to prevent the injection of malicious scripts.

Exploit

Fix

XSS

Code Injection

Weakness Enumeration

CWE-79

CWE-94

Related Identifiers

CVE-2025-13349

Affected Products

Sourcecodester Student Management System

References · 9

• 🔥 https://medium.com/@ankitkaushal43731/title-student-grades-management-system-stored-xss-authenticated-in-grades-php-remarks-field-d9625243df06 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2025-13349 · Security Note
• https://osv.dev/vulnerability/CVE-2025-13349 · Vendor Advisory
• https://vuldb.com/?submit.692065 · Note
• https://sourcecodester.com · Note
• https://t.me/cveNotify/143450 · Telegram Post
• https://vuldb.com/?ctiid.332766 · Note
• https://vuldb.com/?id.332766 · Note
• https://twitter.com/CVEnew/status/1990791980889387043 · Twitter Post