This vulnerability in code-projects Assessment Management 1.0 allows an attacker to perform cross-site scripting by manipulating the 'mark' parameter in the lecturer/add-single-mark.php file. The flaw enables injection of malicious scripts that could be executed in the context of a victim's browser. The vulnerability is remotely exploitable and has been publicly disclosed, but no known exploits are currently reported in the wild. The CVSS 4.0 vector indicates network attack vector, low attack complexity, low privileges required, and partial impact on integrity and availability.

Successful exploitation could allow an attacker to execute arbitrary scripts in the context of the affected application, potentially leading to session hijacking, defacement, or other client-side attacks. The impact is limited to the integrity and availability aspects partially, with no confidentiality impact reported. The vulnerability requires low privileges and user interaction.

No patch or official fix information is provided in the available data. Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until a fix is available, users should consider applying input validation or sanitization on the 'mark' parameter to mitigate the risk of XSS.