CVE-2025-3036

MEDIUM 6.1CVE-2025-3036 · Published 31/03/2025 · updated 17/06/2026

In short

CVE-2025-3036 is a MEDIUM (CVSS 6.1) vulnerability affecting studentservlet-jsp (yzk2356911358).
Chance of exploitation in the next 30 days (EPSS): 0.35%, higher than 28.8% of all vulnerabilities.
No patched version is listed yet: follow the vendor's advisory in References.

Package	Affected versions	Patched versions
studentservlet-jsp yzk2356911358	`= 2020-12-22= 2021-11-25`	No fix yet

Description

A vulnerability, which was classified as problematic, was found in yzk2356911358 StudentServlet-JSP cc0cdce25fbe43b6c58b60a77a2c85f52d2102f5/d4d7a0643f1dae908a4831206f2714b21820f991. This affects an unknown part of the component Student Management Handler. The manipulation of the argument Name leads to cross site scripting. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. This product takes the approach of rolling releases to provide continious delivery. Therefore, version details for affected and updated releases are not available.

References

yzk2356911358/StudentServlet-JSP · Exploit
yzk2356911358/StudentServlet-JSP · Exploit
vuldb.com · Permissions Required
vuldb.com · Third Party Advisory
vuldb.com · Third Party Advisory

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free