This vulnerability in imvks786 student_management_system up to commit 9599b560ad3c3b83e75d328b76bedcd489ef1f46 involves improper access control in an unspecified function within /add.php of the Student Record Handler component. The flaw allows remote attackers to perform unauthorized actions due to insufficient access restrictions. The system's rolling release model complicates version tracking for affected or fixed releases. The issue was reported early to the project, but no vendor response or patch has been provided. The exploit is publicly available, increasing the risk of exploitation.

Successful exploitation can lead to unauthorized access or manipulation of student records via the vulnerable /add.php component. This could compromise data integrity or confidentiality within the student management system. The CVSS 4.0 base score of 5.3 reflects a medium severity with network attack vector, low complexity, no privileges required, and no user interaction needed. The vulnerability impacts access control mechanisms, potentially allowing attackers to bypass restrictions remotely.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Since the vendor has not responded and no official fix is available, users should monitor for updates from the vendor. Until a patch is released, consider restricting access to the /add.php endpoint to trusted users or networks as a temporary mitigation.