This vulnerability affects the add_grade function of the SourceCodester CET Automated Grading System with AI Predictive Analytics version 1.0. An attacker can remotely manipulate the student_id parameter, leading to improper authorization. This means unauthorized users may be able to add or modify grades without proper permissions. The CVSS 4.0 base score is 5.3 (medium), indicating a moderate impact with network attack vector, low attack complexity, and no user interaction required. No vendor advisory or patch information is provided, and no known exploits are reported in the wild.

Successful exploitation allows an attacker to bypass authorization controls in the grading system, potentially modifying student grades without permission. This could undermine the integrity of the grading process and affect academic records. The vulnerability is remotely exploitable without user interaction and requires low privileges to initiate the attack.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, restrict access to the affected function and monitor for unauthorized grade modifications if possible.