CVE-2025-57240

Cross site scripting (XSS) vulnerability in 17gz International Student service system 1.0 allows attackers to execute arbitrary code via the registration step

Medium · published October 23, 2025

CVSS v3.1
6.1
EPSS
0%
Percentile
13.4
In the wild
Unconfirmed
What it is

Cross site scripting (XSS) vulnerability in 17gz International Student service system 1.0 allows attackers to execute arbitrary code via the registration step.

The record
Technical detail
CVSS v3.1
6.1 · MEDIUM
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
CVSS v4.0
Not supplied
EPSS
0.00233 · 13.4th percentile
Published
2025-10-23T00:00Z
EPSS history
Timeline
  • 23 OCT 00:00Z
    Cross site scripting (XSS) vulnerability in 17gz International Student service system 1.0 allows attackers to execute arbitrary code via the registration step
    cvelistv5