Campcodes School Management Software Cross-Site Scripting Vulnerability

A cross-site scripting (XSS) vulnerability has been identified in Campcodes School Management Software version 1.0. The issue arises in the Create Id Card Page component, specifically within the file '/create-id-card'. The vulnerability is triggered by manipulating the 'ID Card Title' argument, allowing for the injection of malicious scripts. This issue can be exploited remotely.

Impact

Exploitation of this vulnerability allows for cross-site scripting, where an attacker can inject malicious scripts that are executed in the context of the user's browser.