https://www.sourcecodester.com/php/4818/online-courseware-using-phpmysql.html
addq.php?id=Grammar
On this page,id parameter is vulnerable to reflected XSS Attack
http://localhost/onlinecourseware/pcci/teacher/addq.php?id=Grammar
"><script>alert(1)</script>