<?xml version="1.0" encoding="UTF-8"?><?xml-stylesheet type="text/xsl" href="../assets/feed.xsl"?><rss version="2.0"><channel><title>PatchTheCVE: student grades management system</title><link>https://patchthecve.com/</link><description>CVEs with upgrade or downgrade fix steps</description><item><title>CVE-2025-64070: Sourcecodester Student Grades Management System v1.0 is vulnerable to Cross Site Scripting (XSS) in the Add Ne</title><link>https://patchthecve.com/cve/CVE-2025-64070.html</link><guid>https://patchthecve.com/cve/CVE-2025-64070.html</guid><pubDate>Wed, 17 Jun 2026 09:53:46 +0000</pubDate><description>MEDIUM 5.4: Sourcecodester Student Grades Management System v1.0 is vulnerable to Cross Site Scripting (XSS) in the Add New Subject Description field.</description></item><item><title>CVE-2025-63892: A vulnerability was determined in SourceCodester Student Grades Management System 1.0</title><link>https://patchthecve.com/cve/CVE-2025-63892.html</link><guid>https://patchthecve.com/cve/CVE-2025-63892.html</guid><pubDate>Sun, 05 Jul 2026 17:17:22 +0000</pubDate><description>MEDIUM 6.8: A vulnerability was determined in SourceCodester Student Grades Management System 1.0. Affected is the function create_classroom of the file /classroom.php of the component My Classrooms Management Page. This manipulation of the argument name/description causes stored cross site scripting.</description></item><item><title>CVE-2025-13349: A vulnerability has been found in SourceCodester Student Grades Management System 1.0</title><link>https://patchthecve.com/cve/CVE-2025-13349.html</link><guid>https://patchthecve.com/cve/CVE-2025-13349.html</guid><pubDate>Sun, 18 Oct 2026 20:10:00 +0000</pubDate><description>LOW 3.5: A vulnerability has been found in SourceCodester Student Grades Management System 1.0. This issue affects some unknown processing of the file /grades.php of the component Add New Grade Page. The manipulation of the argument Remarks leads to cross site scripting. Remote exploitation of the attack is </description></item><item><title>CVE-2025-12332: A flaw has been found in SourceCodester Student Grades Management System 1.0</title><link>https://patchthecve.com/cve/CVE-2025-12332.html</link><guid>https://patchthecve.com/cve/CVE-2025-12332.html</guid><pubDate>Thu, 08 Oct 2026 11:10:00 +0000</pubDate><description>LOW 2.4: A flaw has been found in SourceCodester Student Grades Management System 1.0. This affects the function delete_user of the file /admin.php. Executing manipulation can lead to cross site scripting. The attack may be performed from remote. The exploit has been published and may be used.</description></item><item><title>CVE-2025-11485: A vulnerability was determined in SourceCodester Student Grades Management System 1.0</title><link>https://patchthecve.com/cve/CVE-2025-11485.html</link><guid>https://patchthecve.com/cve/CVE-2025-11485.html</guid><pubDate>Thu, 08 Oct 2026 13:10:00 +0000</pubDate><description>LOW 2.4: A vulnerability was determined in SourceCodester Student Grades Management System 1.0. Affected is the function add_user of the file /admin.php of the component Manage Users Page. This manipulation of the argument first_name/last_name causes cross site scripting. The attack can be initiated remotely</description></item></channel></rss>