SourceCodester CET Automated Grading System with AI Predictive Analytics vulnerabilities

A vulnerability has been detected in the SourceCodester CET Automated Grading System with AI Predictive Analytics 1.0. It affects an unknown function of the file /index.php of the Student Self-Registration Endpoint, leading to improper access controls.

Vulnerability in SourceCodester CET Automated Grading System with AI Predictive Analytics 1.0. An unknown function in the file /index.php allows XSS attack via manipulation of the action argument. The attack can be carried out remotely.

In SourceCodester CET Automated Grading System with AI Predictive Analytics 1.0, the file /index.php?action=register (Registration component) is vulnerable to cross-site scripting via manipulation of the student_id/full_name/section/username arguments. The exploit is public and can be launched remotely.