School Registration and Fee System version 1.0 suffers from persistent cross site scripting vulnerabilities.