A cross-site scripting (XSS) vulnerability exists in the mathurvishal CloudClassroom-PHP-Project within an unknown function in the file manageassessment2.php. The flaw involves manipulation of the arguments ExamName, Q1, Q2, Q3, Q4, and Q5, allowing remote attackers to execute script code. The vendor has not responded to disclosure requests, and no specific affected versions or patches are provided due to the product's rolling release model. Exploit code has been published publicly.