VULNERABILITY INTELLIGENCE

CVE-2025-13349

CVSS score3.5 LOW

EPSS probability0.28%

CISA KEVNot currently listed

Published2025-11-18

Last modified2026-10-18

CVSS vectorCVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:L/A:N

Description

A vulnerability has been found in SourceCodester Student Grades Management System 1.0. This issue affects some unknown processing of the file /grades.php of the component Add New Grade Page. The manipulation of the argument Remarks leads to cross site scripting. Remote exploitation of the attack is possible. The exploit has been disclosed to the public and may be used.

Weakness classification

cna@vuldb.com: CWE-79
nvd@nist.gov: CWE-79

Primary references

cna@vuldb.com — Exploit, Mitigation, Third Party Advisory
cna@vuldb.com — Permissions Required, VDB Entry
cna@vuldb.com — Third Party Advisory, VDB Entry
cna@vuldb.com — Third Party Advisory, VDB Entry
cna@vuldb.com — Product