This vulnerability affects sambitraj STUDENT-MANAGEMENT-SYSTEM 1.0, specifically an unknown function within the Dashboard Page component. The flaw is a cross-site scripting vulnerability caused by manipulation of the 'Name' parameter, which is not properly sanitized. This allows remote attackers to execute arbitrary scripts in the context of the affected application. The vulnerability has a CVSS 4.8 (medium) score, indicating moderate risk with network attack vector and low complexity. The project has been notified but has not issued a fix or official remediation guidance.

Successful exploitation could allow an attacker to execute arbitrary scripts in the victim's browser when viewing the Dashboard Page, potentially leading to session hijacking, defacement, or other client-side impacts. However, the vulnerability requires user interaction and privileges to exploit, and no privilege escalation or direct system compromise is indicated. No known active exploitation in the wild has been reported.

No official fix or patch is currently available from the vendor. Since the vendor has not responded or provided remediation, users should consider implementing application-level input validation or output encoding as a temporary mitigation. Monitor vendor channels for updates and apply any future patches promptly. Avoid exposing the vulnerable component to untrusted users where possible.