kashipara School Management System version 1.0 contains a Cross Site Scripting (XSS) vulnerability in the /adminLogin.php page via the formuser and formpassword parameters. This vulnerability allows an attacker to inject malicious scripts that can execute in the context of the victim's browser. The CVSS 3.1 base score is 6.1, indicating a medium severity level.