CVE-2026-9485
LowCVSS 3.5Exploitation Probability (EPSS)
Low risk16th percentile - higher than 16% of all known CVEs
Summary
A cross-site scripting vulnerability was found in SourceCodester Student Grades Management System 1.0 in the students.php file via the Remarks argument. Remote attack is possible. Exploit is publicly available.
Risk Assessment
An attacker can inject malicious scripts, leading to data theft or session hijacking.
Recommendation
Update the system to the latest version or apply a patch that prevents XSS.
Original NVD description (English source)
A vulnerability was identified in SourceCodester Student Grades Management System 1.0. Affected by this issue is some unknown functionality of the file students.php. The manipulation of the argument Remarks leads to cross site scripting. Remote exploitation of the attack is possible. The exploit is publicly available and might be used.