CVE-2025-11485SourceCodester Student Grades Management System Manage Users admin.php add_user cross site scripting

Descripción

A vulnerability was determined in SourceCodester Student Grades Management System 1.0. Affected is the function add_user of the file /admin.php of the component Manage Users Page. This manipulation of the argument first_name/last_name causes cross site scripting. The attack can be initiated remotely. The exploit has been publicly disclosed and may be utilized.

Datos: CVE.org, NVD, CISA KEV, FIRST EPSS, Ubuntu. Se publican tal como los indican las fuentes, en inglés.

Productos y versiones afectados

Referencias y parches

• VDB-327602 | SourceCodester Student Grades Management System Manage Users admin.php add_user cross site scripting vdb-entrytechnical-descriptionThird Party AdvisoryVDB Entry
• VDB-327602 | CTI Indicators (IOB, IOC, TTP, IOA) signaturepermissions-requiredPermissions RequiredVDB Entry
• Submit #667406 | sourcecodester Student Grades Management System 1.0 Improper Input Validation third-party-advisoryThird Party AdvisoryVDB Entry
• https://github.com/sidzeroday/sourcecodester_cve/blob/main/README.md exploitExploitThird Party Advisory
• https://www.sourcecodester.com/ productProduct