Cross Site Scripting Vulnerability in SourceCodester Online Student Clearance System

CVE-2025-5984

What is CVE-2025-5984?

A cross site scripting vulnerability has been identified in the SourceCodester Online Student Clearance System 1.0. This flaw exists within an unspecified functionality of the /Admin/add-fee.php file, where an unregulated manipulation of the 'txtamt' argument can allow attackers to inject malicious scripts. This vulnerability is particularly concerning as it can be exploited remotely, enabling attackers to execute arbitrary scripts in the context of the user's browser. The exploitation of this vulnerability poses a significant threat to user data integrity and application security.

References