Threats tagged 'ghsa-mww8-x95w-rh7p'

A reflected cross-site scripting (XSS) vulnerability exists in manikandan580 School-management-system version 1.0. The flaw is present in the /studentms/admin/contact-us.php endpoint and can be triggered via the email POST parameter. This vulnerability allows an attacker to inject malicious scripts that are reflected back to the user, potentially leading to information disclosure or session hijacking.