VulnerabilityDeferred

CVE-2025-57240

Cross site scripting (XSS) vulnerability in 17gz International Student service system 1.0 allows attackers to execute arbitrary code via the registration step.

MEDIUM 6.1EPSS 0.22%

Does this matter?

Lower severity and a low EPSS score (0.22%). Track it; it rarely justifies an emergency change on its own.

Description

Cross site scripting (XSS) vulnerability in 17gz International Student service system 1.0 allows attackers to execute arbitrary code via the registration step.

CVSS 3.1: 6.1 MEDIUMCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
EPSS: 0.22% probability · 12th percentile
CISA KEV: Not listed
Weakness: CWE-79
Source: cve@mitre.org

References

https://github.com/samllpotato1/xss/blob/main/xss.txt

Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.