CVE-2025-50584

MediumCVSS 4.8

Published: 18/07/2025(UTC)Updated: 05/07/2026(UTC)Translated: 06/07/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.19%

9th percentile - higher than 9% of all known CVEs

Summary

StudentManage v1.0 was discovered to contain a cross-site scripting (XSS) vulnerability in the Add A New Teacher module. This allows an attacker to inject malicious scripts into the web page.

Risk Assessment

An attacker can exploit this vulnerability to steal user sessions, redirect to malicious sites, or perform other actions in the context of the victim.

Recommendation

Update StudentManage to the latest version that includes a fix for the XSS vulnerability. In the meantime, validate and sanitize input data in the Add A New Teacher module.

Original NVD description (English source)

StudentManage v1.0 was discovered to contain a cross-site scripting (XSS) vulnerability via the Add A New Teacher module.