CVE-2026-9485: SourceCodester Student Grades Management System students.php cross site scripting
Published May 25, 2026
·Updated
A vulnerability was identified in SourceCodester Student Grades Management System 1.0. Affected by this issue is some unknown functionality of the file students.php. The manipulation of the argument Remarks leads to cross site scripting. Remote exploitation of the attack is possible. The exploit is publicly available and might be used.
Affected Software
1 affected component
Sourcecodester Student Grades Management System=1.0
Event History
May 25, 2026
CVE Published
via MITRE·07:15 PM
Data Sourced
via MITRE·07:15 PM
DescriptionSeverityWeakness
Frequently Asked Questions
1
What is the severity of CVE-2026-9485?
The severity of CVE-2026-9485 is low with a score of 3.5.
2
How do I fix CVE-2026-9485?
To fix CVE-2026-9485, sanitize and validate user inputs in the students.php file to prevent cross site scripting.
3
What type of vulnerability is CVE-2026-9485?
CVE-2026-9485 is a cross site scripting (XSS) vulnerability.
4
What components are affected by CVE-2026-9485?
The vulnerability affects the SourceCodester Student Grades Management System, specifically the students.php file.
5
Can CVE-2026-9485 be exploited remotely?
Yes, remote exploitation of CVE-2026-9485 is possible.