CVE-2025-64070

Medium · 5.4

CVSS

5.4

EPSS

0.2%

Published

Dec 2, 2025

CISA due date

—

The record

Sourcecodester Student Grades Management System v1.0 is vulnerable to Cross Site Scripting (XSS) in the Add New Subject Description field.

Ecosystem	Package	Introduced	Fixed