Threat Intelligence Database

CVE-2026-9485 is a cross-site scripting (XSS) vulnerability in SourceCodester Student Grades Management System version 1.0. The issue arises from improper handling of the 'Remarks' parameter in the students.php file, allowing remote attackers to inject malicious scripts. The vulnerability has a medium severity rating with a CVSS score of 5.1. No official patch or remediation guidance is currently available from the vendor. Exploits are publicly available, but no known active exploitation in the wild has been reported.

A vulnerability was determined in SourceCodester Student Grades Management System 1.0. Affected by this vulnerability is the function getClassroomStudents/removeStudentFromClassroom of the file classroom.php. Executing a manipulation of the argument classroom_id can lead to improper authorization. The attack may be launched remotely. The exploit has been publicly disclosed and may be utilized.

CVE-2026-9483 is a medium severity vulnerability in SourceCodester Student Grades Management System version 1.0. It involves improper authorization in the grades.php file, where manipulation of the student_id argument can bypass authorization controls. The vulnerability can be exploited remotely without user interaction or elevated privileges. No official patch or remediation guidance is currently available from the vendor. The exploit details have been publicly disclosed, but no known exploitation in the wild has been reported.