Cross Site Scripting Vulnerability in SourceCodester Student Grades Management System 1.0
CVE-2025-13349

5.1MEDIUM

Key Information:

Vendor

Sourcecodester
Status
Student Grades Management System
Vendor
CVE Published:
18 November 2025

What is CVE-2025-13349?

A cross site scripting vulnerability exists in the Add New Grade component of SourceCodester Student Grades Management System 1.0. The flaw is in the processing of the /grades.php file, where manipulation of the 'Remarks' argument allows attackers to execute arbitrary JavaScript code in the context of users' browsers. This could result in unauthorized access to sensitive data or redirection to malicious sites. Remote exploitation is feasible, and public disclosure of this vulnerability has occurred, raising serious concerns about the application's security.

Affected Version(s)

Student Grades Management System 1.0

References

https://vuldb.com/?id.332766
vdb-entrytechnical-description
https://vuldb.com/?ctiid.332766
signaturepermissions-required
https://vuldb.com/?submit.692065
third-party-advisory

CVSS V4

Score:
5.1
Severity:
MEDIUM
Confidentiality:
None
Integrity:
Low
Availability:
None
Attack Vector:
Network
Attack Complexity:
Low
Attack Required:
None
Privileges Required:
Undefined
User Interaction:
Unknown

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Credit

ankitkumar7 (VulDB User)
JSON
.
CVE-2025-13349 : Cross Site Scripting Vulnerability in SourceCodester Student Grades Management System 1.0