Vulnerabilities

TI-2025-32174 CVE-2025-50586 · GHSA-2ghx-mx8m-8w49

StudentManage v1.0 was discovered to contain Cross-Site Request Forgery (CSRF).

MEDIUM 62

StudentManage v1.0 was discovered to contain Cross-Site Request Forgery (CSRF).

CVSS 3.1MEDIUM 6.5 Network No auth No interaction EPSS 0.00172 Published 2025-07-18 No fix listed CWE-352

TI-2025-32173 CVE-2025-50585 · GHSA-j9wg-hp22-g525

HIGH 73

StudentManage v1.0 was discovered to contain a SQL injection vulnerability via the component /admin/adminStudentUrl.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.00391 Published 2025-07-18 No fix listed CWE-89

TI-2025-32172 CVE-2025-50584 · GHSA-92hh-vh5p-5x9f

MEDIUM 55

StudentManage v1.0 was discovered to contain a cross-site scripting (XSS) vulnerability via the Add A New Teacher module.

CVSS 3.1MEDIUM 4.8 Network High privileges User interaction EPSS 0.00216 Published 2025-07-18 No fix listed CWE-79

TI-2025-32171 CVE-2025-50583 · GHSA-27q6-c3vc-27q9

MEDIUM 55

StudentManage v1.0 was discovered to contain a cross-site scripting (XSS) vulnerability via the Add A New Student module.

CVSS 3.1MEDIUM 4.8 Network High privileges User interaction EPSS 0.00216 Published 2025-07-18 No fix listed CWE-79

TI-2025-32170 CVE-2025-50582 · GHSA-8m7g-pwgr-8x7c

MEDIUM 55

StudentManage v1.0 was discovered to contain a cross-site scripting (XSS) vulnerability via the Add A New Course module.

CVSS 3.1MEDIUM 4.8 Network High privileges User interaction EPSS 0.00216 Published 2025-07-18 No fix listed CWE-79