Kashipara School Management System Cross-Site Scripting Vulnerability

A cross-site scripting (XSS) vulnerability has been identified in Kashipara School Management System version 1.0. The issue arises in the feedback.php file located within the client_user directory. Attackers can exploit this vulnerability by injecting JavaScript code through vulnerable URL parameters.

Impact

Exploitation of this vulnerability allows for cross-site scripting, where an attacker can inject malicious scripts that are executed in the context of the user's browser.

Reproduction

To reproduce this vulnerability, navigate to the feedback.php page in the client_user directory. Inject JavaScript code into the URL parameter and observe that the script is executed, demonstrating the cross-site scripting vulnerability.