CVE-2024-46336

kashipara School Management System 1.0 is vulnerable to Cross Site Scripting XSS via /clientuser/feedback.php...

CVE-2024-46336

The kashipara School Management System 1.0 is vulnerable to Cross-Site Scripting (XSS) due to an unvalidated parameter in the /client_user/feedback.php endpoint. An attacker can inject malicious scripts into the application through this file, potentially impacting users interacting with the feedb...