{"id":"CVE-2026-9485","state":"PUBLISHED","title":"SourceCodester Student Grades Management System students.php cross site scripting","description":"A vulnerability was identified in SourceCodester Student Grades Management System 1.0. Affected by this issue is some unknown functionality of the file students.php. The manipulation of the argument Remarks leads to cross site scripting. Remote exploitation of the attack is possible. The exploit is publicly available and might be used.","publishedAt":"2026-05-25T19:15:09.731Z","updatedAt":"2026-05-26T12:38:45.429Z","severity":{"score":5.1,"label":"Medium","version":"4.0","vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:P/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N/E:P","source":"VulDB"},"assigner":"VulDB","products":["SourceCodester Student Grades Management System"],"affected":[{"vendor":"SourceCodester","product":"Student Grades Management System","versions":[{"version":"1.0","status":"affected"}],"cpes":["cpe:2.3:a:sourcecodester:student_grades_management_system:*:*:*:*:*:*:*:*"]}],"references":["https://vuldb.com/vuln/365466","https://vuldb.com/vuln/365466/cti","https://vuldb.com/submit/814043","https://github.com/Jack-MRJ/Student-Grades-Management-System-Vulnerability-Report","https://www.sourcecodester.com/"],"weaknesses":["CWE-79","CWE-94"],"ingestedAt":"2026-10-29T20:13:52.441Z","source":{"repository":"CVEProject/cvelistV5","path":"cves/2026/9xxx/CVE-2026-9485.json","commit":"556c9d3a8cd17e218bb8e452ba7cd619a384ff47"},"raw":{"dataType":"CVE_RECORD","dataVersion":"5.2","cveMetadata":{"cveId":"CVE-2026-9485","state":"PUBLISHED","datePublished":"2026-05-25T19:15:09.731Z","dateUpdated":"2026-05-26T12:38:45.429Z","assignerShortName":"VulDB","assignerOrgId":"1af790b2-7ee1-4545-860a-a788eba489b5","dateReserved":"2026-05-24T09:26:27.614Z"},"containers":{"cna":{"title":"SourceCodester Student Grades Management System students.php cross site scripting","descriptions":[{"lang":"en","value":"A vulnerability was identified in SourceCodester Student Grades Management System 1.0. Affected by this issue is some unknown functionality of the file students.php. The manipulation of the argument Remarks leads to cross site scripting. Remote exploitation of the attack is possible. The exploit is publicly available and might be used."}],"affected":[{"vendor":"SourceCodester","product":"Student Grades Management System","versions":[{"version":"1.0","status":"affected"}],"cpes":["cpe:2.3:a:sourcecodester:student_grades_management_system:*:*:*:*:*:*:*:*"]}],"references":[{"url":"https://vuldb.com/vuln/365466","name":"VDB-365466 | SourceCodester Student Grades Management System students.php cross site scripting","tags":["vdb-entry","technical-description"]},{"url":"https://vuldb.com/vuln/365466/cti","name":"VDB-365466 | CTI Indicators (IOB, IOC, TTP, IOA)","tags":["signature","permissions-required"]},{"url":"https://vuldb.com/submit/814043","name":"Submit #814043 | SourceCodester Student Grades Management System 1.0 Cross Site Scripting","tags":["third-party-advisory"]},{"url":"https://github.com/Jack-MRJ/Student-Grades-Management-System-Vulnerability-Report","tags":["exploit"]},{"url":"https://www.sourcecodester.com/","tags":["product"]}],"metrics":[{"cvssV4_0":{"version":"4.0","baseScore":5.1,"vectorString":"CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:P/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N/E:P","baseSeverity":"MEDIUM"}},{"cvssV3_1":{"version":"3.1","baseScore":3.5,"vectorString":"CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:L/A:N/E:P/RL:X/RC:R","baseSeverity":"LOW"}},{"cvssV3_0":{"version":"3.0","baseScore":3.5,"vectorString":"CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:L/A:N/E:P/RL:X/RC:R","baseSeverity":"LOW"}},{"cvssV2_0":{"version":"2.0","baseScore":4,"vectorString":"AV:N/AC:L/Au:S/C:N/I:P/A:N/E:POC/RL:ND/RC:UR"}}],"problemTypes":[{"descriptions":[{"cweId":"CWE-79","type":"CWE","lang":"en","description":"Cross Site Scripting"}]},{"descriptions":[{"cweId":"CWE-94","type":"CWE","lang":"en","description":"Code Injection"}]}],"providerMetadata":{"shortName":"VulDB","orgId":"1af790b2-7ee1-4545-860a-a788eba489b5","dateUpdated":"2026-05-25T19:15:09.731Z"},"timeline":[{"time":"2026-05-24T00:00:00.000Z","lang":"en","value":"Advisory disclosed"},{"time":"2026-05-24T02:00:00.000Z","lang":"en","value":"VulDB entry created"},{"time":"2026-05-24T11:31:57.000Z","lang":"en","value":"VulDB entry last update"}],"credits":[{"lang":"en","value":"GeekerA (VulDB User)","type":"reporter"}],"tags":["x_freeware"]},"adp":[{"title":"CISA ADP Vulnrichment","metrics":[{"other":{"type":"ssvc","content":{"timestamp":"2026-05-26T12:38:33.073778Z","id":"CVE-2026-9485","options":[{"Exploitation":"none"},{"Automatable":"no"},{"Technical Impact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}}],"providerMetadata":{"shortName":"CISA-ADP","orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","dateUpdated":"2026-05-26T12:38:45.429Z"}}]}}}