PT-2025-48725 · Sourcecodester · Student Grades Management System

Published 2025-12-02 · Updated 2025-12-02 · CVE-2025-64070

Positive Technologies (AI Summary)

CVSS v3.1

5.4

Medium

Base vector

AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N

Name of the Vulnerable Software and Affected Versions Sourcecodester Student Grades Management System version 1.0

Description The Sourcecodester Student Grades Management System is affected by a Cross Site Scripting (XSS) issue. The issue is present in the Add New Subject Description field. An attacker could potentially inject malicious scripts into the application through this field.

Recommendations Apply any available updates to address the issue in the Add New Subject Description field. As a temporary workaround, consider sanitizing user input in the Add New Subject Description field to prevent the injection of malicious scripts.

Exploit

Fix

XSS

Weakness Enumeration

CWE-79

Related Identifiers

CVE-2025-64070

Affected Products

Student Grades Management System

References · 7

• 🔥 https://github.com/vabnamoni/CVE-Researches/blob/main/CVE-2025-64070 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2025-64070 · Security Note
• https://osv.dev/vulnerability/CVE-2025-64070 · Vendor Advisory
• https://t.me/CVEtracker/38697 · Telegram Post
• https://twitter.com/CVEnew/status/1995905877136523372 · Twitter Post
• https://twitter.com/VulmonFeeds/status/1995970558551290266 · Twitter Post
• https://linkedin.com/in/vabna-lina-24ab17186 · Note