SourceCodester Student Grades Management System Cross-Site Scripting Vulnerability

A cross-site scripting (XSS) vulnerability has been identified in SourceCodester Student Grades Management System version 1.0. The issue arises in the file students.php, where the Remarks argument can be manipulated to execute malicious scripts. This vulnerability allows for remote exploitation, and public exploits are available.

Impact

Exploitation of this vulnerability allows for cross-site scripting, where an attacker can inject malicious scripts that are executed in the context of the user's browser.

Reproduction

To reproduce this vulnerability, navigate to the students.php file in the SourceCodester Student Grades Management System version 1.0. Manipulate the Remarks argument to include a script payload. Once the payload is submitted, the injected script will execute, demonstrating the cross-site scripting vulnerability.