SourceCodester Online Book Store System 1.0 contains a cross-site scripting vulnerability in the System Settings Module, specifically in the /admin/index.php?page=site_settings file. This vulnerability allows an attacker with high privileges to remotely inject malicious scripts via manipulated input, resulting in reflected XSS. The vulnerability is identified as CWE-79 and has a CVSS 3.1 base score of 2.4, indicating low severity. Exploit code has been made public, but no active exploitation in the wild is known. No official patch or fix information is provided.

The vulnerability enables remote attackers with high privileges to execute reflected cross-site scripting attacks, potentially leading to limited impact such as user interface manipulation or session hijacking within the context of the affected system. There is no indication of confidentiality or availability impact. No known active exploitation has been reported.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until a fix is available, restrict access to the affected module to trusted users only and apply input validation or sanitization controls if possible.