github.comexploit
https://github.com/RaulPazemecxas/PoCVulDb/blob/main/README8.md CVE-2025-6475
MEDIUM
SourceCodester Student Result Management System Manage Students Module manage_students cross site scripting
Record summary
CVE-2025-6475 has a selected CVSS score of 4.8 (medium).
Description
A vulnerability was found in SourceCodester Student Result Management System 1.0 and classified as problematic. This issue affects some unknown processing of the file /script/admin/manage_students of the component Manage Students Module. The manipulation leads to cross site scripting. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used.
Description source: CVE List
Exploitation context
CISA SSVC decision
ExploitationPoC
AutomatableNo
Technical impactPartial
CISA Coordinator · SSVC 2.0.3 · Evaluated Jun 23, 2025 · Source: CVE List
Affected products and versions
1| Product | Source | Version range | Status |
|---|---|---|---|
Student Result Management SystemBrowse SourceCodester / Student Result Management System | CVE List | 1.0 | affected |
References
6nvd.nist.gov
https://nvd.nist.gov/vuln/detail/CVE-2025-6475 VDB-313583 | CTI Indicators (IOB, IOC, TTP, IOA)signaturepermissions required
https://vuldb.com/?ctiid.313583 VDB-313583 | SourceCodester Student Result Management System Manage Students Module manage_students cross site scriptingvdb entry
https://vuldb.com/?id.313583 Submit #600550 | SourceCodester Student Result Management System 1.0 Stored Cross Site ScriptingThird-party advisory
https://vuldb.com/?submit.600550 sourcecodester.comproduct
https://www.sourcecodester.com/