Cross Site Scripting Vulnerability in SourceCodester Student Result Management System
CVE-2025-5724
4.8MEDIUM
Key Information:
- Vendor
Sourcecodester
- Vendor
- CVE Published:
- 6 June 2025
Badges
👾 Exploit Exists🟡 Public PoC
What is CVE-2025-5724?
A cross site scripting vulnerability exists in the SourceCodester Student Result Management System 1.0, specifically affecting the Subjects Page component in the /script/academic/subjects file. An attacker can exploit this vulnerability by manipulating the Subject argument, potentially enabling remote code execution and the injection of malicious scripts. Public disclosure of the exploit increases the urgency for affected users to implement mitigation strategies.
Affected Version(s)
Student Result Management System 1.0
Exploit Proof of Concept (PoC)
PoC code is written by security researchers to demonstrate the vulnerability can be exploited. PoC code is also a key component for weaponization which could lead to ransomware.