This vulnerability affects SourceCodester College Notes Gallery Management System version 1.0. An attacker can manipulate the 'role' parameter in the signup.php file, which is part of the registration flow component, to improperly escalate privileges. The vulnerability allows remote exploitation without requiring user interaction or prior privileges. The CVSS 4.0 base score is 6.9 (medium severity), reflecting network attack vector, low complexity, no privileges required, no user interaction, and limited confidentiality, integrity, and availability impacts. No official patch or remediation information is provided in the source data.

Successful exploitation can lead to improper privilege escalation, potentially allowing an attacker to gain unauthorized access or elevated privileges within the system. This could compromise the integrity and confidentiality of the application and its data. The vulnerability is exploitable remotely without authentication, increasing the risk of attack.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, restrict access to the signup functionality if possible and monitor for suspicious activity related to privilege escalation attempts involving the 'role' parameter.