CVE detail
CVE-2025-11485
A vulnerability was determined in SourceCodester Student Grades Management System 1.0. Affected is the function add_user of the file /admin.php of the component Manage Users Page. This manipulation of the argument first_name/last_name causes cross site scripting. The attack can be initiated remotely. The exploit has been publicly disclosed and may be utilized.
Buzz score
Why this CVE is surfacing
This all-time snapshot uses the same composite formula as Trending across a 30-year evidence window, rather than a current rolling window.
Buzz score components · mention 17.9 · diversity 8.0 · KEV 0.0 · OTX 0.0 · PoC 4.5
Why it matters now
Mention timeline
- Total mentions
- 0
- within the 30d window
- Peak daily
- 0
- highest bucket
Evidence
Source links by recency
5 source links · newest first
- https://www.sourcecodester.com/www.sourcecodester.com
No excerpt available.
Exploitwww.sourcecodester.comOct 8, 2025, 5:15 PM - https://vuldb.com/?submit.667406vuldb.com
No excerpt available.
Exploitvuldb.comOct 8, 2025, 5:15 PM - https://vuldb.com/?id.327602vuldb.com
No excerpt available.
Exploitvuldb.comOct 8, 2025, 5:15 PM - https://vuldb.com/?ctiid.327602vuldb.com
No excerpt available.
Exploitvuldb.comOct 8, 2025, 5:15 PM No excerpt available.
Exploitgithub.comOct 8, 2025, 5:15 PM
Exploit code
Public exploit repository references
Public PoC repositories are third-party, potentially unsafe artifacts. Treat their code as untrusted and use it only on authorized systems in an isolated, least-privilege environment. cvebuzz does not execute the code or verify that an exploit works.
1 repository references · best confidence 0.90 · max 0 stars
- sidzeroday/sourcecodester_cveHigh confidencegithubNVD Exploit reference0 starsDiscovered Jul 23, 2026, 12:21 PM
NVD labels the source link as Exploit; this is not independent verification of the repository's code.
Related records
Similar CVEs
6 related CVEs with shared weakness or product evidence
- CVE-2025-13349CVSS 2.0 · Low
A vulnerability has been found in SourceCodester Student Grades Management System 1.0. This issue affects some unknown processing of the file /grades.php of the component Add New…
- CVE-2025-12332CVSS 1.9 · Low
A flaw has been found in SourceCodester Student Grades Management System 1.0. This affects the function delete_user of the file /admin.php. Executing manipulation can lead to cros…
- CVE-2026-75078CVSS 2.1 · Low
A security flaw has been discovered in SourceCodester Class and Exam Timetabling System 1.0. This affects an unknown part of the file /BSHRM1.php. Performing a manipulation of the…
- CVE-2026-75077CVSS 2.1 · Low
A vulnerability was identified in SourceCodester Class and Exam Timetabling System 1.0. Affected by this issue is some unknown functionality of the file /BSCE2.php. Such manipulat…
- CVE-2026-19998CVSS 2.1 · Low
A weakness has been identified in code-projects Online Shopping System 1.0. Impacted is an unknown function of the file offersmail.php. Executing a manipulation of the argument em…
- CVE-2026-19995CVSS 2.0 · Low
A vulnerability was determined in Webkul Bagisto up to 2.4.4. This affects an unknown part of the file /customer/account/rma/send-message of the component RMA Message Handler. Thi…