Cross-Site Scripting Vulnerability in yzk2356911358 Student Management Handler

CVE-2025-3036

Summary

A vulnerability has been identified in the Student Management Handler of yzk2356911358's StudentServlet-JSP. This issue allows an attacker to manipulate the 'Name' argument, leading to potential cross-site scripting attacks. Such vulnerabilities enable malicious actors to execute unauthorized scripts in the context of a user's session, posing serious security risks. The issue can be exploited remotely, and public disclosure of the exploit increases the urgency for affected users to address this vulnerability. As the product uses a rolling release model, specific version information for affected updates may not be explicitly available.

References