The vulnerability CVE-2026-10301 affects itsourcecode Fees Management System version 1.0. It is a cross-site scripting flaw caused by insufficient sanitization of the 'page' parameter in the index.php file. This allows remote attackers to execute arbitrary scripts in the context of the affected application. The vulnerability is publicly known but no exploit in the wild has been reported. There is no vendor-provided patch or official remediation level indicated at this time.

Successful exploitation of this vulnerability could allow an attacker to execute arbitrary scripts in the context of the user's browser session, potentially leading to session hijacking, defacement, or other malicious actions that rely on script execution. The impact is limited to the scope of the affected application and user interaction with the vulnerable parameter.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, users should consider applying input validation or sanitization controls on the 'page' parameter if possible, or restrict access to the affected application to trusted users only.