A vulnerability labeled as critical has been found in code-projects Simple Grading System 1.0. Affected is an unknown function of the file /add_student_grade.php of the component Admin Panel. The manipulation of the argument Add results in sql injection.

This vulnerability is known as CVE-2025-9664. It is possible to launch the attack remotely. Furthermore, an exploit is available.