This vulnerability affects SourceCodester Student Grades Management System 1.0, specifically the students.php file where the 'Remarks' argument is not properly sanitized. This allows an attacker to perform cross-site scripting (XSS) attacks by injecting malicious scripts remotely. The vulnerability requires low attack complexity and no privileges but does require user interaction. The CVSS 4.0 vector indicates network attack vector, low attack complexity, low privileges required, user interaction needed, and limited impact on confidentiality and integrity.

Successful exploitation could allow an attacker to execute arbitrary scripts in the context of the affected web application, potentially leading to session hijacking, defacement, or other client-side impacts. However, the impact on confidentiality and integrity is limited according to the CVSS vector. No direct evidence of active exploitation in the wild is reported.

No official patch or remediation is currently available for this vulnerability. Users of SourceCodester Student Grades Management System 1.0 should monitor the vendor's advisory channels for updates. In the meantime, applying input validation and output encoding on the 'Remarks' parameter could mitigate the risk. Since no vendor advisory or official fix is provided, patch status is not yet confirmed — check the vendor advisory for current remediation guidance.