CVE-2023-49985

Name of the Vulnerable Software and Affected Versions School Fees Management System version 1.0

Description A cross-site scripting issue in the /management/class component allows attackers to execute arbitrary web scripts or HTML by injecting a crafted payload into the cname parameter.

Recommendations For School Fees Management System version 1.0, avoid using the cname parameter in the /management/class component until a fix is available. As a temporary workaround, consider validating and sanitizing all user input to minimize the risk of exploitation.