CVE-2025-3036

🗓️ 31 Mar 2025 22:00:10Reported by VulDBType

cve🔗 web.nvd.nist.gov📰️ 1 Media mentions👁 56 Views🌐 WEB

Vulnerability CVE-2025-3036 allows remote cross-site scripting in the Student Management Handler component.

Reporter	Title	Published	Views	Family All 9
Circl	CVE-2025-3036	31 Mar 202522:31	–	circl
CNNVD	StudentServlet-JSP 安全漏洞	31 Mar 202500:00	–	cnnvd
CNVD	StudentServlet-JSP Cross-Site Scripting Vulnerability	9 Apr 202500:00	–	cnvd
Cvelist	CVE-2025-3036 yzk2356911358 StudentServlet-JSP Student Management cross site scripting	31 Mar 202522:00	–	cvelist
EUVD	EUVD-2025-9020	3 Oct 202520:07	–	euvd
NVD	CVE-2025-3036	31 Mar 202522:15	–	nvd
OSV	CVE-2025-3036	31 Mar 202522:15	–	osv
RedhatCVE	CVE-2025-3036	2 Apr 202522:34	–	redhatcve
Vulnrichment	CVE-2025-3036 yzk2356911358 StudentServlet-JSP Student Management cross site scripting	31 Mar 202522:00	–	vulnrichment

NVD

Node

yzk2356911358 studentservlet-jspMatch2020-12-22

yzk2356911358 studentservlet-jspMatch2021-11-25

[
  {
    "vendor": "yzk2356911358",
    "product": "StudentServlet-JSP",
    "versions": [
      {
        "version": "cc0cdce25fbe43b6c58b60a77a2c85f52d2102f5",
        "status": "affected"
      },
      {
        "version": "d4d7a0643f1dae908a4831206f2714b21820f991",
        "status": "affected"
      }
    ],
    "modules": [
      "Student Management Handler"
    ]
  }
]

Source	Link
vuldb	www.vuldb.com/
github	www.github.com/yzk2356911358/StudentServlet-JSP/issues/2
vuldb	www.vuldb.com/
github	www.github.com/yzk2356911358/StudentServlet-JSP/issues/2
vuldb	www.vuldb.com/

Parameter	Position	Path	Description	CWE
Name	query param	/StudentServlet-JSP/cc0cdce25fbe43b6c58b60a77a2c85f52d2102f5/d4d7a0643f1dae908a4831206f2714b21820f991	Cross-site scripting vulnerability via manipulation of the Name parameter.	CWE-79, CWE-94

15 Apr 2025 14:44Current

3.6Low risk

Vulners AI Score3.6

CVSS 3.12.4 - 6.1

CVSS 23.3

CVSS 44.8

CVSS 32.4

EPSS0.00201

SSVC