A vulnerability was found in raisulislamg4 student_management_system_by_php up to 310d950e09013d5133c6b9210aff9444382d16d1 . It has been declared as problematic . The impacted element is an unknown function of the file admission_form_check.php . The manipulation of the argument Message results in cross site scripting. This vulnerability is identified as CVE-2026-10228 . The attack can be executed remotely. Additionally, an exploit exists. This product implements a rolling release for ongoing del