The mathurvishal CloudClassroom-PHP-Project contains a cross-site scripting vulnerability in an unknown function within managevideos2.php related to the Faculty Video Management component. Manipulation of the V_Title, V_Url, or V_Remarks arguments can lead to XSS attacks. This vulnerability can be exploited remotely and requires user interaction. The product uses a rolling release system, so specific affected or fixed versions are not disclosed. The vendor did not respond to early disclosure attempts, and no official patch or remediation guidance is available. The CVSS 3.1 vector is AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:L/A:N, scoring 3.5.

Successful exploitation allows an attacker to perform cross-site scripting attacks, potentially leading to limited impact such as injection of malicious scripts in the context of the affected web application. The confidentiality and availability are not impacted, but integrity is partially impacted. The attack requires user interaction and low privileges.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Since the vendor has not responded and no patch is available, users should consider applying manual input validation or sanitization on the affected parameters (V_Title, V_Url, V_Remarks) in managevideos2.php to mitigate XSS risks. Monitor for updates from the vendor or community for an official fix.