SourceCodester Interview Management System Cross-Site Scripting Vulnerability

A cross-site scripting (XSS) vulnerability has been identified in SourceCodester Interview Management System version 1.0. The issue resides in the file /editQuestion.php, specifically within an unknown function that processes the Question argument. This vulnerability allows remote attackers to inject malicious scripts, which could be executed in the context of the user's browser, potentially compromising their security and privacy.

Impact

Exploitation of this vulnerability allows for cross-site scripting, where injected scripts are executed in the context of the user's browser.

Reproduction

To reproduce this vulnerability, navigate to the /editQuestion.php?id=6 page. Inject a script payload into the 'Submit' parameter. Once the page is refreshed, the injected script will execute, demonstrating the cross-site scripting vulnerability.