PT-2025-47322 · Sourcecodester · Student Grades Management System

Published 2025-11-18 · Updated 2025-11-19 · CVE-2025-63892

Positive Technologies (AI Summary)

CVSS v3.1

6.8

Medium

Base vector

AV:N/AC:L/PR:H/UI:R/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions SourceCodester Student Grades Management System version 1.0

Description A stored cross site scripting issue exists in the Student Grades Management System. The issue is related to the manipulation of the name and description arguments within the create classroom function located in the /classroom.php file of the My Classrooms Management Page component.

Recommendations Apply updates to address the vulnerability in the create classroom function of the /classroom.php file.

Exploit

Fix

XSS

Weakness Enumeration

CWE-79

Related Identifiers

CVE-2025-63892

Affected Products

Student Grades Management System

References · 6

• 🔥 https://github.com/minhajultaivin/security-advisories/blob/main/CVE-2025-63892.md · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2025-63892 · Security Note
• https://osv.dev/vulnerability/CVE-2025-63892 · Vendor Advisory
• http://sourcecodester.com · Note
• https://twitter.com/CVEnew/status/1991066241667404011 · Twitter Post
• http://student.com · Note