Name of the Vulnerable Software and Affected Versions:

Institute-of-Current-Students version 1.0

Description:

A stored Cross-Site Scripting (XSS) vulnerability exists in the `qureydetails.php` page. The input fields for `Query` and `Answer` do not properly sanitize user input, allowing authenticated users to inject arbitrary JavaScript code.

Recommendations:

Sanitize user input for the `Query` and `Answer` fields in the `qureydetails.php` page to prevent the injection of malicious scripts.