A Reflected Cross Site Scripting (XSS) vulnerability was found in /smsa/student_login.php in Kashipara Responsive School Management System v3.2.0, which allows remote attackers to execute arbitrary code via "error" parameter.
CWE-79 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')