CVE-2025-13795

A weakness has been identified in codingWithElias School Management System up to f1ac334bfd89ae9067cc14dea12ec6ff3f078c01. Affected is an unknown function of the file /student-view.php of the component Edit Student Info Page. This manipulation of the argument First Name causes cross site scripting. Remote exploitation of the attack is possible. The exploit has been made available to the public and could be exploited. This product follows a rolling release approach for continuous delivery, so version details for affected or updated releases are not provided. Other parameters might be affected as well. The vendor was contacted early about this disclosure but did not respond in any way.

• CWE-79
• CWE-94

• https://github.com/Al1ce258/MY-CVE-REPORTS/blob/main/school-management-system.md
• https://vuldb.com/?ctiid.333806
• https://vuldb.com/?id.333806
• https://vuldb.com/?submit.691836

Published

Nov 30, 2025

Last Modified

Jun 17, 2026

Status

Deferred

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2025-1379A vulnerability has been found in code-projects Real Estate …9.8
• CVE-2025-13790A vulnerability was determined in Scada-LTS up to 2.7.8.1. T…8.8
• CVE-2025-13791A vulnerability was identified in Scada-LTS up to 2.7.8.1. A…6.5
• CVE-2025-13792A security flaw has been discovered in Qualitor up to 8.20.1…7.3
• CVE-2025-13793A weakness has been identified in winston-dsouza Ecommerce-W…4.3
• CVE-2025-13794The Auto Featured Image (Auto Post Thumbnail) plugin for Wor…4.3
• CVE-2025-13796A security vulnerability has been detected in deco-cx apps u…6.3
• CVE-2025-13797A vulnerability was detected in ADSLR B-QE2W401 250814-r037c…9.8
• CVE-2025-13798A flaw has been found in ADSLR NBR1005GPEV2 250814-r037c. Th…9.8
• CVE-2025-13799A vulnerability has been found in ADSLR NBR1005GPEV2 250814-…9.8
• CVE-2025-1380A vulnerability was found in Codezips Gym Management System …9.8
• CVE-2025-13800A vulnerability was found in ADSLR NBR1005GPEV2 250814-r037c…9.8