CVE-2025-50586
MediumCVSS 6.5Exploitation Probability (EPSS)
Low risk5th percentile - higher than 5% of all known CVEs
Summary
StudentManage v1.0 was discovered to contain a Cross-Site Request Forgery (CSRF) vulnerability. This allows an attacker to perform unauthorized actions on behalf of an authenticated user.
Risk Assessment
The risk is that an attacker can execute unwanted operations (e.g., data modification, account creation) without the victim's knowledge, potentially compromising data integrity and authorization.
Recommendation
Implement CSRF protection mechanisms such as synchronization tokens (CSRF tokens) in forms and requests, and validate the Origin or Referer header.
Other vulnerabilities in StudentManage
See all- CVE-2025-50583Medium
StudentManage v1.0 was found to contain a cross-site scripting (XSS) vulnerability in the Add A New Student module. This allows an attacker to inject malicious scripts into the page.
- CVE-2025-50582Medium
StudentManage v1.0 was discovered to contain a cross-site scripting (XSS) vulnerability in the Add A New Course module. This allows an attacker to inject malicious scripts into the page.
- CVE-2025-50584Medium
StudentManage v1.0 was discovered to contain a cross-site scripting (XSS) vulnerability in the Add A New Teacher module. This allows an attacker to inject malicious scripts into the web page.
- CVE-2025-50585High
A SQL injection vulnerability was discovered in StudentManage v1.0 within the /admin/adminStudentUrl component. An attacker can exploit this flaw to manipulate database queries.
Original NVD description (English source)
StudentManage v1.0 was discovered to contain Cross-Site Request Forgery (CSRF).
Vulnerability data from NVD (NIST) · CISA KEV · EPSS