This vulnerability affects SourceCodester Student Grades Management System 1.0 and is located in an unspecified function within grades.php. By manipulating the student_id parameter, an attacker can bypass authorization checks, potentially accessing or modifying data they should not be authorized to handle. The vulnerability is remotely exploitable without requiring user interaction or elevated privileges, indicating a weakness in access control mechanisms. The CVSS 4.0 base score is 5.3, reflecting a medium severity impact. No official patch or vendor advisory is currently available, and the product is not a cloud service, so remediation depends on vendor action or user mitigation.

Successful exploitation allows an attacker to bypass authorization controls related to student grade data, potentially leading to unauthorized access or modification of sensitive academic records. The impact is limited to the affected version 1.0 of the Student Grades Management System. There is no evidence of active exploitation in the wild at this time.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Since no official fix or workaround is currently documented, users should monitor for vendor updates and consider restricting access to the affected grades.php functionality or implementing additional access control measures until a patch is available.