CVE-2025-12332: SourceCodester Student Grades Management System admin.php delete_user cross site scripting
A flaw has been found in SourceCodester Student Grades Management System 1.0. This affects the function deleteuser of the file /admin.php. Executing manipulation can lead to cross site scripting. The attack may be performed from remote. The exploit has been published and may be used.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2025-12332?
CVE-2025-12332 has been classified as a high-severity vulnerability due to its ability to enable cross-site scripting attacks.
How do I fix CVE-2025-12332?
To mitigate CVE-2025-12332, ensure that user inputs on the delete_user function in /admin.php are properly sanitized and validated.
What systems are affected by CVE-2025-12332?
CVE-2025-12332 affects the SourceCodester Student Grades Management System version 1.0.
Can CVE-2025-12332 be exploited remotely?
Yes, CVE-2025-12332 can be exploited remotely, allowing attackers to manipulate the system from a distance.
What impact does CVE-2025-12332 have on users?
The impact of CVE-2025-12332 can lead to unauthorized execution of scripts in the context of a user's session, potentially compromising sensitive data.