A cross-site scripting (XSS) vulnerability exists in the mathurvishal CloudClassroom-PHP-Project within the updatedetailsfromfaculty.php file. The flaw is triggered by manipulation of the fname argument and can be exploited remotely. The vendor has not provided a response or patch, and no specific affected versions are identified due to the project's rolling release model. Public exploit code is available. The vulnerability has a medium severity rating with a CVSS score of 4.3.