CVE-2025-14662
LowCVSS 2.4Exploitation Probability (EPSS)
Low risk13th percentile - higher than 13% of all known CVEs
Summary
A vulnerability was found in code-projects Student File Management System 1.0. It affects an unknown part of the file /admin/update_user.php in the Update User Page component. Manipulation leads to cross site scripting. The attack may be initiated remotely and the exploit has been made public.
Risk Assessment
XSS can allow execution of malicious script in the user's browser, leading to session or data theft. The public exploit increases the risk of exploitation.
Recommendation
Update the system to the latest version or apply patches. Implement input validation and sanitization, and consider deploying a WAF.
Other vulnerabilities in Student File Management System
See all- CVE-2025-15205Medium
A vulnerability was identified in code-projects Student File Management System 1.0. It affects an unknown functionality in the file /download.php. Manipulation of the argument istore_id leads to SQL injection. The attack can be initiated remotely, and the exploit is publicly available.
- CVE-2025-14663Low
A vulnerability was determined in code-projects Student File Management System 1.0. Manipulation in the file /admin/update_student.php leads to cross site scripting. The attack may be launched remotely and the exploit has been publicly disclosed.
Original NVD description (English source)
A vulnerability was found in code-projects Student File Management System 1.0. This affects an unknown part of the file /admin/update_user.php of the component Update User Page. Performing manipulation results in cross site scripting. The attack may be initiated remotely. The exploit has been made public and could be used.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS