Cross-Site Scripting Vulnerability in SourceCodester Student Result Management System
CVE-2025-5723
Key Information:
- Vendor
Sourcecodester
- Vendor
- CVE Published:
- 6 June 2025
Badges
What is CVE-2025-5723?
The SourceCodester Student Result Management System 1.0 contains a cross-site scripting vulnerability within its Classes Page component. An attacker can exploit this issue by manipulating the Class Name argument in the /script/academic/classes endpoint, potentially leading to malicious scripts being executed in the context of a victim's browser. This exploitation can be carried out remotely, posing a significant risk to the security of users interacting with the affected system. The vulnerability has been publicly disclosed, making it crucial for users to implement appropriate security measures.
Affected Version(s)
Student Result Management System 1.0
Exploit Proof of Concept (PoC)
PoC code is written by security researchers to demonstrate the vulnerability can be exploited. PoC code is also a key component for weaponization which could lead to ransomware.