This vulnerability in sambitraj STUDENT-MANAGEMENT-SYSTEM 1.0 involves improper sanitization of the 'Name' argument on the Dashboard Page, enabling remote cross-site scripting attacks. The CVSS 4.0 base score is 4.8 (medium), reflecting network attack vector, low attack complexity, no privileges required, but user interaction needed. The vendor has been notified but has not issued a fix or mitigation. Exploit code has been publicly disclosed, increasing the risk of exploitation.

Successful exploitation allows an attacker to execute arbitrary scripts in the context of the affected web application, potentially leading to session hijacking, defacement, or other client-side impacts. However, the vulnerability requires user interaction and does not escalate privileges or compromise the server directly. No known exploits are currently observed in the wild.

No official patch or remediation is currently available from the vendor. Users should monitor the vendor's communications for updates. Until a fix is released, consider applying web application firewall (WAF) rules to detect and block suspicious input targeting the 'Name' parameter on the Dashboard Page. Educate users to be cautious of unexpected input or links related to the application.