CVE-2025-11485: SourceCodester Student Grades Management System Manage Users admin.php add_user cross site scripting
A vulnerability was determined in SourceCodester Student Grades Management System 1.0. Affected is the function adduser of the file /admin.php of the component Manage Users Page. This manipulation of the argument firstname/lastname causes cross site scripting. The attack can be initiated remotely. The exploit has been publicly disclosed and may be utilized.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2025-11485?
The severity of CVE-2025-11485 is classified as medium due to the potential for cross-site scripting attacks.
How do I fix CVE-2025-11485?
To fix CVE-2025-11485, validate and sanitize user input for the first_name and last_name fields in the add_user function.
Which systems are affected by CVE-2025-11485?
CVE-2025-11485 affects the SourceCodester Student Grades Management System version 1.0.
What type of vulnerability is CVE-2025-11485?
CVE-2025-11485 is a cross-site scripting (XSS) vulnerability.
Can CVE-2025-11485 be exploited remotely?
Yes, CVE-2025-11485 can be exploited remotely if an attacker inserts malicious scripts into the affected input fields.