Unknown · Student-Manage · CVE-2024-13902
**Name of the Vulnerable Software and Affected Versions**
huang-yk student-manage version 1.0
**Description**
A problematic issue was found in the Edit a Student Information Page component, allowing for cross-site scripting through the manipulation of the `Class` argument. This can be initiated remotely.
**Recommendations**
For version 1.0, consider restricting access to the Edit a Student Information Page component until a fix is available, and avoid using the `Class` argument in this context to minimize the risk of exploitation.