CVE-2025-13244
MediumCVSS 4.3Exploitation Probability (EPSS)
Low risk32th percentile - higher than 32% of all known CVEs
Summary
A vulnerability was determined in code-projects Student Information System 2.0 in /register.php. This manipulation causes cross-site scripting (XSS). The attack can be initiated remotely, and the exploit has been publicly disclosed.
Risk Assessment
An attacker could execute malicious scripts in a user's browser, potentially leading to session or data theft.
Recommendation
Update the application to a patched version or implement input validation and sanitization in /register.php.
Other vulnerabilities in Student Information System
See all- CVE-2025-15052Low
A vulnerability was detected in code-projects Student Information System 1.0 in the file /profile.php. Manipulation of the firstname/lastname arguments leads to cross-site scripting (XSS). The exploit is publicly available and can be used remotely.
- CVE-2025-13245Low
A cross-site scripting vulnerability was identified in code-projects Student Information System 2.0 in the /editprofile.php file. The attack can be launched remotely and a public exploit is available.
Original NVD description (English source)
A vulnerability was determined in code-projects Student Information System 2.0. The affected element is an unknown function of the file /register.php. This manipulation causes cross site scripting. It is possible to initiate the attack remotely. The exploit has been publicly disclosed and may be utilized.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS