CVE-2025-63892: XSS
A vulnerability was determined in SourceCodester Student Grades Management System 1.0. Affected is the function createclassroom of the file /classroom.php of the component My Classrooms Management Page. This manipulation of the argument name/description causes stored cross site scripting.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2025-63892?
The severity of CVE-2025-63892 is categorized as high due to its potential for stored cross-site scripting attacks.
How do I fix CVE-2025-63892?
To fix CVE-2025-63892, ensure that input sanitization and validation are implemented for the arguments in the create_classroom function.
What component is affected in CVE-2025-63892?
CVE-2025-63892 affects the My Classrooms Management Page component in the SourceCodester Student Grades Management System.
What versions are affected by CVE-2025-63892?
CVE-2025-63892 specifically affects version 1.0 of the SourceCodester Student Grades Management System.
What kind of attack does CVE-2025-63892 enable?
CVE-2025-63892 enables stored cross-site scripting attacks through the manipulation of the classroom creation arguments.