A cross-site scripting vulnerability exists in the mathurvishal CloudClassroom-PHP-Project up to commit 5dadec098bfbbf3300d60c3494db3fb95b66e7be. The flaw is located in an unknown function within updatequery.php, where manipulation of the 'queryx' argument allows remote attackers to execute XSS attacks. The product's rolling release model prevents identification of exact affected or patched versions. The vendor was contacted but did not provide any response or patch information. Public exploit code is available.

Successful exploitation allows remote attackers to perform cross-site scripting attacks, potentially leading to client-side script execution in the context of the affected application. This can result in session hijacking, defacement, or other malicious actions depending on the victim's interaction with the vulnerable component. The medium CVSS score reflects moderate impact with no privileges required and user interaction needed.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Since the vendor has not responded and no patch links are available, users should monitor official channels for updates. Until a fix is available, consider applying input validation or sanitization on the 'queryx' parameter as a temporary mitigation.