CVE-2025-65136: In manikandan580 School-management-system 1.0, a reflected XSS vulnerability exists in /studentms/admin/contact-us.php v

Description

In manikandan580 School-management-system 1.0, a reflected XSS vulnerability exists in /studentms/admin/contact-us.php via the pagedes POST parameter.

Affected Products

Vendor	Product	Versions
manikandan580	school-management-system	n/a

References

https://github.com/TREXNEGRO/Security-Advisories/blob/main/CVE-2025-65136/README.md

Related News (1 articles)

Tier C

VulDB5d ago

CVE-2025-65136 | manikandan580 School-management-system 1.0 POST Parameter contact-us.php pagedes cross site scripting

→ No new info (linked only)

CVSS 3.16.1 MEDIUM

VectorCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

CISA KEV❌ No

Actively exploited✅ Yes

CWECWE-79

PublishedApr 14, 2026

Last enriched5d agov2

Trending Score21

Source articles1

Independent1

Info Completeness6/14

Missing: cvss, epss, cwe, kev, exploit, patch, iocs, mitre_attack

Community Vote

0 upvotes0 downvotes

Version History

Last enriched 5d ago

v2Tier C5d ago

Updated vendor and product information, changed severity to HIGH, and corrected exploit availability to false.

descriptionseverityactivelyExploited

via VulDB

v15d ago

Initial creation

CVE-2025-65136: In manikandan580 School-management-system 1.0, a reflected XSS vulnerability exists in /studentms/admin/contact-us.php v

Description

Affected Products

References

Related News (1 articles)

Community Vote

Related CVEs (3)

Pin to Dashboard

Verification

Vulnerability Timeline

Version History