CVE-2024-1265

Name of the Vulnerable Software and Affected Versions CodeAstro University Management System version 1.0

Description A problematic vulnerability has been found in the Attendance Management component, specifically in the file /att add.php. The manipulation of the Student Name argument leads to cross-site scripting. This issue can be exploited remotely.

Recommendations For CodeAstro University Management System version 1.0, consider disabling the Student Name argument in the /att add.php file until a patch is available to prevent cross-site scripting attacks. Restrict access to the Attendance Management component to minimize the risk of exploitation.