SourceCodester Interview Management System 1.0 contains a cross-site scripting (XSS) vulnerability in the /editQuestion.php file. The flaw arises from improper handling of the 'Question' parameter, allowing remote attackers to inject malicious scripts. Public exploit code is available, but the vulnerability has a low severity score.