Hackfive

**Name of the Vulnerable Software and Affected Versions** SourceCodester Class and Exam Timetabling System version 1.0 **Description** Cross site scripting occurs when manipulating the `day` argument within the `/BSIS.php` endpoint. This issue allows a remote attacker to execute malicious scripts in the context of the user's session. **Recommendations** Update SourceCodester Class and Exam Timetabling System version 1.0 to a version that contains a fix for this issue. As a temporary workaround, restrict access to the `/BSIS.php` endpoint or sanitize the `day` argument to prevent the execution of arbitrary scripts.