# CVE-2025-13349: A vulnerability has been found in SourceCodester Student Grades Management System 1.0. This issue affects some unknown…

Source: https://junglewise.ai/threats/cve-2025-13349-a-vulnerability-has-been-found-in-sourcecodester-student-grades  
Publisher: Junglewise Threat Intelligence, https://junglewise.ai/threats  
Published: 2025-11-18  
License: CC BY 4.0 with a link back

CVE-2025-13349 · Severity: low · CVSS 3.5 · Published 2025-11-18

A vulnerability has been found in SourceCodester Student Grades Management System 1.0. This issue affects some unknown processing of the file /grades.php of the component Add New Grade Page. The manipulation of the argument Remarks leads to cross site scripting. Remote exploitation of the attack is possible. The exploit has been disclosed to the public and may be used.

Technologies: [Remyandrade Student Grades Management System](https://junglewise.ai/threats/technologies/remyandrade-student-grades-management-system). Vendors: [Remyandrade](https://junglewise.ai/threats/vendors/remyandrade).

## Quick answers

**Is CVE-2025-13349 exploited in the wild?** No. Junglewise Threat Intelligence has no report of CVE-2025-13349 being exploited in the wild.

**How severe is CVE-2025-13349?** Low severity, with a CVSS score of 3.5, published 18 November 2025.

**Which products and versions are affected?** Remyandrade Student Grades Management System. The advisory does not name versions.

**Is there a fix for CVE-2025-13349?** No fixed version is recorded yet. Check the vendor's advisory in the references below. If you run it, Junglewise drafts a mitigation that fits your setup and applies it once you approve, with senior security engineers behind it.

**Am I affected by CVE-2025-13349?** Check whether you run Remyandrade Student Grades Management System. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

## Affected products

- Remyandrade Student Grades Management System

## Related threats

- [Sourcecodester Student Grades Management System v1.0 is vulnerable to Cross Site Scripting (XSS) in the Add New Subject Description field.](https://junglewise.ai/threats/cve-2025-64070-sourcecodester-student-grades-management-system-v1-0-is)
- [A flaw has been found in SourceCodester Student Grades Management System 1.0. This affects the function delete_user of the file /admin.php.](https://junglewise.ai/threats/cve-2025-12332-a-flaw-has-been-found-in-sourcecodester-student-grades-management)
- [A vulnerability was determined in SourceCodester Student Grades Management System 1.0. Affected is the function add_user of the file /admin.](https://junglewise.ai/threats/cve-2025-11485-a-vulnerability-was-determined-in-sourcecodester-student-grades)