Hawk High

Summary
The startSession function sets the cutOffScore dynamically, but there is no enforcement of this score for students.

Vulnerability Details
Root Cause: The startSession function does not validate the cutOffScore:

cutOffScore = _cutOffScore;

Initial State: A session is not active.

Step 1: The principal starts a session with any cutoff score.

Outcome: Students can participate regardless of their scores.

Implications: The cutoff score becomes meaningless.

Impact
Who is affected: The school system.

How they are affected: The system loses credibility if cutoff scores are not enforced.

Tools Used
manuel review

Recommendations
Add logic to enforce the cutoff score:

require(studentScore[msg.sender] >= cutOffScore, "Score below cutoff");