Eric Tee

An issue exists where the Navigation module does not sufficiently sanitize certain attributes, leading to Cross-Site Scripting (XSS), a condition where malicious scripts are injected into trusted websites. Exploitation requires the attacker to possess a role with permission to enter HTML tags containing specific data attributes or the `administer menu` permission.

A vulnerability has been found in the SourceCodester Student Result Management System, classified as problematic. This issue affects unknown code of the file /script/academic/terms of the component Add Academic Term. The manipulation of the `Academic Term` argument leads to cross-site scripting. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used.

A vulnerability was found in the SourceCodester Student Result Management System, classified as problematic. This issue affects some unknown processing of the file "/script/academic/classes" of the component Classes Page. The manipulation of the argument `Class Name` leads to cross-site scripting. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used.