PT-2025-47319
CVE-2025-13349
·
Published
2025-11-18
·
Updated
2025-11-20
Description by
CVSS 3.1
5.4
MediumMetricsAV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N
Name of the Vulnerable Software and Affected Versions
SourceCodester Student Grades Management System version 1.0
Description
A flaw exists in SourceCodester Student Grades Management System 1.0 related to the processing of the
/grades.php file within the Add New Grade Page component. Manipulation of the Remarks argument can lead to cross site scripting. The exploit for this issue has been publicly disclosed.Recommendations
Apply any available updates or patches for version 1.0. As a temporary workaround, consider sanitizing the
Remarks input to prevent the injection of malicious scripts.Exploitability
Exploit
Fix
Impacts
Researchers
Vendors
Affected products
Found an issue in the description? Have something to add? Feel free to write us 👾