CVE-2025-4469 MEDIUM

CVE-2025-4469: SourceCodester Online Student Clearance System add-admin.php cross site scripting

Vendor Sourcecodester
Product Online Student Clearance System
Weakness CWE-79 · XSS
Published May 9, 2025
Last update May 16, 2025
View on NVD All CVEs

CVSS base score

4.8/10
Attack vector Network
Attack complexity Low
Privileges required High
User interaction —
Confidentiality —
Integrity —

CVSS vector

CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:P/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N

What the vulnerability does

01Description

A vulnerability classified as problematic has been found in SourceCodester Online Student Clearance System 1.0. Affected is an unknown function of the file /admin/add-admin.php. The manipulation of the argument txtusername/txtfullname/txtpassword/txtpassword2 leads to cross site scripting. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used.

Key dates

02Disclosure timeline

May 9, 2025 CVE published
May 16, 2025 Record updated

Related vulnerabilities

04Related CVE

CVE-2024-32508 WordPress DethemeKit For Elementor plugin <= 2.0.2 - Cross Site Scripting (XSS) vulnerability CVE-2025-31804 WordPress Follow Us Badges plugin <= 3.1.11 - Cross Site Scripting (XSS) vulnerability CVE-2025-6594 XSS in Special:ApiSandbox CVE-2024-13470 Ninja Forms – The Contact Form Builder That Grows With You <= 3.8.24 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode CVE-2026-29177 Craft Commerce has Stored XSS in Craft Commerce Order Details Slideout