Multi Branch School Management System version 3.5 suffers from a persistent cross site scripting vulnerability.