Stored Cross-Site Scripting Vulnerability in SourceCodester Student Grades Management System
CVE-2025-63892

6.8MEDIUM

Key Information:

Vendor

SourceCodester
Status
Student Grades Management System
Vendor
CVE Published:
18 November 2025

What is CVE-2025-63892?

A vulnerability in the SourceCodester Student Grades Management System 1.0 allows for stored cross-site scripting through manipulation of the argument names and descriptions in the create_classroom function located in /classroom.php. This flaw can enable attackers to inject malicious scripts into the system, potentially affecting all users accessing the impacted component.

References

http://student.com
http://sourcecodester.com
https://github.com/minhajultaivin/security-advisories/blo...

CVSS V3.1

Score:
6.8
Severity:
MEDIUM
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
High
User Interaction:
Required
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

JSON
.