CVE-2025-14663
LowCVSS 2.4Exploitation Probability (EPSS)
Low risk14th percentile - higher than 14% of all known CVEs
Summary
A vulnerability was determined in code-projects Student File Management System 1.0. Manipulation in the file /admin/update_student.php leads to cross site scripting. The attack may be launched remotely and the exploit has been publicly disclosed.
Risk Assessment
XSS can enable execution of malicious code in the user's browser, leading to session data theft or account takeover. The public exploit increases the risk of attack.
Recommendation
Update the software to the latest version or apply patches. Implement input validation and consider deploying a WAF.
Other vulnerabilities in Student File Management System
See all- CVE-2025-15205Medium
A vulnerability was identified in code-projects Student File Management System 1.0. It affects an unknown functionality in the file /download.php. Manipulation of the argument istore_id leads to SQL injection. The attack can be initiated remotely, and the exploit is publicly available.
- CVE-2025-14662Low
A vulnerability was found in code-projects Student File Management System 1.0. It affects an unknown part of the file /admin/update_user.php in the Update User Page component. Manipulation leads to cross site scripting. The attack may be initiated remotely and the exploit has been made public.
Original NVD description (English source)
A vulnerability was determined in code-projects Student File Management System 1.0. This vulnerability affects unknown code of the file /admin/update_student.php. Executing manipulation can lead to cross site scripting. The attack may be launched remotely. The exploit has been publicly disclosed and may be utilized.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS