CyberRota Analysis
AI-GeneratedA cross-site scripting vulnerability exists in the SourceCodester Class and Exam Timetabling System 1.0, specifically in the /schoolyr.php file, where manipulation of the 'sy' argument can lead to remote exploitation. Although the severity is rated low, the availability of public exploits means that organizations using this system should prioritize patching to mitigate potential risks. Users of this software should assess their exposure and implement necessary security measures to protect against possible attacks.
Public Exploit Signal
A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.
Note: these links are listed for security research and verification purposes only.
Original NVD Description
A vulnerability was identified in SourceCodester Class and Exam Timetabling System 1.0. Affected by this issue is some unknown functionality of the file /schoolyr.php. The manipulation of the argument sy leads to cross site scripting. It is possible to initiate the attack remotely. The exploit is publicly available and might be used.