Marry_2026

**Name of the Vulnerable Software and Affected Versions** imvks786 student management system versions prior to 9599b560ad3c3b83e75d328b76bedcd489ef1f46 **Description** A cross site scripting issue exists in the `/add.php` file. Remote attackers can trigger this by manipulating the `name`, `address`, or `fname` arguments. Cross site scripting is a technique where malicious scripts are injected into trusted websites. **Recommendations** As a temporary workaround, restrict access to the `/add.php` file or avoid using the `name`, `address`, and `fname` parameters until a fix is released.