CVE-2026-9486
MediumCVSS 4.3Exploitation Probability (EPSS)
Low risk9th percentile - higher than 9% of all known CVEs
Summary
A CSRF vulnerability has been discovered in SourceCodester Student Grades Management System 1.0. An unknown part allows CSRF attacks that can be executed remotely. The exploit has been made public and may be used in attacks.
Risk Assessment
Risk of unauthorized actions performed on behalf of an authenticated user, such as grade changes or system configuration modifications.
Recommendation
Implement CSRF protections (e.g., tokens) and update the system if a patch is available.
Other vulnerabilities in SourceCodester Student Grades Management System
See all- CVE-2026-9485Low
A cross-site scripting vulnerability was found in SourceCodester Student Grades Management System 1.0 in the students.php file via the Remarks argument. Remote attack is possible. Exploit is publicly available.
- CVE-2025-63892Medium
A stored cross-site scripting vulnerability was found in SourceCodester Student Grades Management System 1.0. The create_classroom function in /classroom.php fails to sanitize the name/description arguments, allowing script injection.
Original NVD description (English source)
A security flaw has been discovered in SourceCodester Student Grades Management System 1.0. This affects an unknown part. The manipulation results in cross-site request forgery. The attack can be executed remotely. The exploit has been released to the public and may be used for attacks.