CASAP Automated Enrollment Cross-Site Scripting Vulnerability (CNVD-2021-57773)

CASAP Automated Enrollment is an automated enrollment system from the CASAP organization. The purpose of the project is to provide CASAP with an automated enrollment system to streamline the school process and make it more effective, efficient and easy to retrieve. A security vulnerability exists in the SourceCodester CASAP Automated Enrollment System, which can be exploited by remote attackers to inject arbitrary web scripts with student information parameters or HTML to edit study .php.