CyberRota Analysis
AI-GeneratedA cross-site scripting vulnerability exists in the manage_subjects.php file of the SourceCodester Syllabus-Aligned Learning Management & Examination System 1.0, allowing attackers to manipulate the msg/title/content parameters remotely. This could lead to unauthorized script execution in the context of the user's session, potentially compromising sensitive data or user accounts. Organizations using this system should prioritize remediation to mitigate the risk of exploitation, especially if they handle sensitive educational data.
Public Exploit Signal
A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.
Note: these links are listed for security research and verification purposes only.
Original NVD Description
A vulnerability was found in SourceCodester Syllabus-Aligned Learning Management & Examination System 1.0. The affected element is an unknown function of the file manage_subjects.php. The manipulation of the argument msg/title/content results in cross site scripting. The attack may be performed from remote. The exploit has been made public and could be used.