kashipara School Management System version 1.0 contains a Cross Site Scripting (XSS) vulnerability in the /client_user/feedback.php endpoint. This vulnerability allows an attacker to inject malicious scripts that can execute in the context of a user's browser session. The vulnerability has a CVSS 3.1 score of 6.1, indicating a medium severity level. No patch or remediation information is provided, and there are no known exploits in the wild at this time.