Description
A vulnerability has been found in itsourcecode Student Transcript Processing System 1.0 and classified as problematic. Affected by this vulnerability is an unknown functionality of the file /admin/modules/subject/edit.php. The manipulation of the argument pre leads to cross site scripting. The attack can be launched remotely. The exploit has been disclosed to the public and may be used.
Metrics
CVSS 3.1 6.1/10
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:NWeakness enumeration
Affected software
| Vendor | Product | Versions |
|---|---|---|
| itsourcecode | Student Transcript Processing System | 1.0 |
References
- https://github.com/Catcheryp/CVE/issues/5Exploit, Issue Tracking, Third Party Advisory
- https://itsourcecode.com/Product
- https://vuldb.com/?ctiid.315121Permissions Required
- https://vuldb.com/?id.315121Third Party Advisory, VDB Entry
- https://vuldb.com/?submit.607104Third Party Advisory, VDB Entry
- https://github.com/Catcheryp/CVE/issues/5Exploit, Issue Tracking, Third Party Advisory
Timeline
- Published
- Jul 8, 2025
- Last modified
- Jun 17, 2026
- NVD status
- Analyzed