CVE-2025-50584
MediumCVSS 4.8Exploitation Probability (EPSS)
Low risk9th percentile - higher than 9% of all known CVEs
Summary
StudentManage v1.0 was discovered to contain a cross-site scripting (XSS) vulnerability in the Add A New Teacher module. This allows an attacker to inject malicious scripts into the web page.
Risk Assessment
An attacker can exploit this vulnerability to steal user sessions, redirect to malicious sites, or perform other actions in the context of the victim.
Recommendation
Update StudentManage to the latest version that includes a fix for the XSS vulnerability. In the meantime, validate and sanitize input data in the Add A New Teacher module.
Other vulnerabilities in StudentManage
See all- CVE-2025-50583Medium
StudentManage v1.0 was found to contain a cross-site scripting (XSS) vulnerability in the Add A New Student module. This allows an attacker to inject malicious scripts into the page.
- CVE-2025-50582Medium
StudentManage v1.0 was discovered to contain a cross-site scripting (XSS) vulnerability in the Add A New Course module. This allows an attacker to inject malicious scripts into the page.
- CVE-2025-50585High
A SQL injection vulnerability was discovered in StudentManage v1.0 within the /admin/adminStudentUrl component. An attacker can exploit this flaw to manipulate database queries.
- CVE-2025-50586Medium
StudentManage v1.0 was discovered to contain a Cross-Site Request Forgery (CSRF) vulnerability. This allows an attacker to perform unauthorized actions on behalf of an authenticated user.
Original NVD description (English source)
StudentManage v1.0 was discovered to contain a cross-site scripting (XSS) vulnerability via the Add A New Teacher module.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS