CVE-2025-50582

9th percentile - higher than 9% of all known CVEs

StudentManage v1.0 was discovered to contain a cross-site scripting (XSS) vulnerability in the Add A New Course module. This allows an attacker to inject malicious scripts into the page.

An attacker can exploit this vulnerability to steal user sessions, redirect to malicious sites, or perform other actions in the victim's context.

Update StudentManage to the latest version and implement input filtering and encoding in the Add A New Course module.