SourceCodester Student Grades Management System 1.0 contains a stored cross-site scripting (XSS) vulnerability in the create_classroom function within the /classroom.php file. This vulnerability arises from improper handling of the name and description arguments, allowing malicious script injection. The vulnerability has a CVSS score of 6.8, indicating a medium severity level.