SourceCodester Student Grades Management System 1.0 contains a CSRF vulnerability that enables remote attackers to perform unauthorized actions by exploiting the trust a web application has in the user's browser. The vulnerability affects an unspecified part of the system and requires user interaction. The CVSS 4.0 vector indicates network attack vector, low attack complexity, no privileges required, user interaction required, and low impact on integrity. No official fix or patch has been published, and the product is not a cloud service.

Successful exploitation of this vulnerability could allow attackers to perform unauthorized state-changing requests on behalf of authenticated users, potentially leading to unauthorized modifications within the Student Grades Management System. The impact is rated medium based on the CVSS score and vector, reflecting limited integrity impact and the need for user interaction.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, users should consider implementing CSRF protections such as anti-CSRF tokens or same-site cookie attributes if possible. Monitoring for unusual user activity may help detect exploitation attempts. No vendor-provided mitigation or official fix is currently documented.