CVE-2025-50584 identifies a cross-site scripting (XSS) vulnerability in StudentManage v1.0 specifically within the Add A New Teacher module. The vulnerability is characterized by CWE-79 and allows an attacker with high privileges to execute scripts in the context of another user, potentially leading to limited confidentiality and integrity impacts. The CVSS 3.1 base score is 4.8 (medium severity), with attack vector network, low attack complexity, required privileges high, user interaction required, and scope changed.

An attacker with high privileges can exploit this XSS vulnerability to execute malicious scripts via the Add A New Teacher module, potentially leading to partial disclosure or modification of information accessible to the user. The vulnerability does not impact system availability. There are no known exploits in the wild at this time.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until a fix is available, restrict access to the Add A New Teacher module to trusted users only and consider implementing input validation and output encoding as temporary mitigations.