This vulnerability affects an unknown function within the Student Management Handler component of the hemant6488 CodeIgniter-StudentManagementSystem, specifically at the endpoint /index.php/students/addStudentView. Improper access controls allow remote attackers to manipulate the system to gain unauthorized access or perform unauthorized actions. The product uses a rolling release model, so specific affected versions are identified by commit hashes rather than version numbers. The vendor has been informed but has not yet responded or provided a fix. The CVSS 4.0 base score is 6.9, indicating a medium severity with network attack vector, no privileges required, no user interaction, and low impact on confidentiality, integrity, and availability.

The vulnerability can lead to unauthorized access or actions within the Student Management Handler component of the affected system. Since it involves improper access controls, attackers may bypass restrictions intended to protect sensitive student management functions. The impact is rated medium based on the CVSS score, reflecting limited but meaningful compromise potential. No known active exploitation has been reported.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Since the vendor has not responded or released a fix, users should monitor official channels for updates. Until a fix is available, restricting access to the affected endpoint and implementing additional access control checks at the network or application level may help reduce risk.