CVE-2025-13349

· LOWAnalyzed

← All CVEs

CVSS v3.1

3.5

CVSS v4.0

2.0

EPSS

0.25%

Published

Nov 18, 2025

Modified

Apr 28, 2026

Public PoC / Exploit (1)

All weaponized →

TrickestTrickest PoC index

Links to public security research (Exploit-DB, Nuclei, Trickest, GitHub) for defensive use only.

Description

A vulnerability has been found in SourceCodester Student Grades Management System 1.0. This issue affects some unknown processing of the file /grades.php of the component Add New Grade Page. The manipulation of the argument Remarks leads to cross site scripting. Remote exploitation of the attack is possible. The exploit has been disclosed to the public and may be used.

CVSS Vector

CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:L/A:N

Weaknesses (CWE)

CWE-79CWE-94CWE-79

Affected Products (1)

remyandrade · student_grades_management_systemvulnerable

References (5)

https://medium.com/@ankitkaushal43731/title-student-grades-management-system-stored-xss-authenticated-in-grades-php-remarks-field-d9625243df06

ExploitMitigationThird Party Advisory

https://vuldb.com/?ctiid.332766

Permissions RequiredVDB Entry

https://vuldb.com/?id.332766