PT-2026-43113 · Sourcecodester · Student Grades Management System

Geekera · CVE-2026-9485 · Published 2026-05-25 · Updated 2026-05-25

Positive Technologies (AI Summary)

CVSS v2.0

4.0

Medium

Base vector

AV:N/AC:L/Au:S/C:N/I:P/A:N

Name of the Vulnerable Software and Affected Versions SourceCodester Student Grades Management System version 1.0

Description An issue exists in the students.php file where the manipulation of the Remarks argument allows for cross-site scripting (XSS), a technique where malicious scripts are injected into trusted websites. This allows for remote exploitation of the system.

Recommendations Update SourceCodester Student Grades Management System version 1.0 to a version that contains a fix for this issue. As a temporary workaround, restrict or sanitize the input of the Remarks argument in the students.php file.

Exploit

Fix

Code Injection

XSS

Weakness Enumeration

CWE-94

CWE-79

Related Identifiers

CVE-2026-9485

Affected Products

Student Grades Management System

References · 7

• 🔥 https://github.com/Jack-MRJ/Student-Grades-Management-System-Vulnerability-Report · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2026-9485 · Security Note
• https://sourcecodester.com · Note
• https://vuldb.com/vuln/365466 · Note
• https://t.me/CVEtracker/54903 · Telegram Post
• https://vuldb.com/submit/814043 · Note
• https://vuldb.com/vuln/365466/cti · Note