SourceCodester Student Result Management System Cross-Site Scripting Vulnerability in Grading System Page

A cross-site scripting (XSS) vulnerability has been identified in SourceCodester Student Result Management System version 1.0. The issue arises in the Grading System Page, specifically within the file '/script/academic/grading-system'. The vulnerability is triggered by manipulating the 'Remark' argument, allowing for the injection of malicious scripts. This issue can be exploited remotely and requires user interaction.

Impact

Exploitation of this vulnerability allows for cross-site scripting, where an attacker can inject malicious scripts that are executed in the context of the user's browser.

Reproduction

To reproduce this vulnerability, navigate to the Grading System Page in the SourceCodester Student Result Management System. Manipulate the 'Remark' argument by inputting a script or other malicious content. Once submitted, the injected script will be executed, demonstrating the cross-site scripting vulnerability.