# CVE-2025-11485: A vulnerability was determined in SourceCodester Student Grades Management System 1.0. Affected is the function add_user of the file /admin.

Source: https://junglewise.ai/threats/cve-2025-11485-a-vulnerability-was-determined-in-sourcecodester-student-grades  
Publisher: Junglewise Threat Intelligence, https://junglewise.ai/threats  
Published: 2025-10-08  
License: CC BY 4.0 with a link back

CVE-2025-11485 · Severity: low · CVSS 2.4 · Published 2025-10-08

A vulnerability was determined in SourceCodester Student Grades Management System 1.0. Affected is the function add_user of the file /admin.php of the component Manage Users Page. This manipulation of the argument first_name/last_name causes cross site scripting. The attack can be initiated remotely. The exploit has been publicly disclosed and may be utilized.

Technologies: [Remyandrade Student Grades Management System](https://junglewise.ai/threats/technologies/remyandrade-student-grades-management-system). Vendors: [Remyandrade](https://junglewise.ai/threats/vendors/remyandrade).

## Quick answers

**Is CVE-2025-11485 exploited in the wild?** No. Junglewise Threat Intelligence has no report of CVE-2025-11485 being exploited in the wild.

**How severe is CVE-2025-11485?** Low severity, with a CVSS score of 2.4, published 8 October 2025.

**Which products and versions are affected?** Remyandrade Student Grades Management System. The advisory does not name versions.

**Is there a fix for CVE-2025-11485?** No fixed version is recorded yet. Check the vendor's advisory in the references below. If you run it, Junglewise drafts a mitigation that fits your setup and applies it once you approve, with senior security engineers behind it.

**Am I affected by CVE-2025-11485?** Check whether you run Remyandrade Student Grades Management System. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

## Affected products

- Remyandrade Student Grades Management System

## Related threats

- [Sourcecodester Student Grades Management System v1.0 is vulnerable to Cross Site Scripting (XSS) in the Add New Subject Description field.](https://junglewise.ai/threats/cve-2025-64070-sourcecodester-student-grades-management-system-v1-0-is)
- [A vulnerability has been found in SourceCodester Student Grades Management System 1.0. This issue affects some unknown…](https://junglewise.ai/threats/cve-2025-13349-a-vulnerability-has-been-found-in-sourcecodester-student-grades)
- [A flaw has been found in SourceCodester Student Grades Management System 1.0. This affects the function delete_user of the file /admin.php.](https://junglewise.ai/threats/cve-2025-12332-a-flaw-has-been-found-in-sourcecodester-student-grades-management)