CVE-2026-7222 - Vulnerability Analysis

Overview

code-projects Coaching Management System 1.0 contains a stored XSS caused by manipulation of the "Complaint" argument in /cims/modules/student/complaint.php Complaint Form Page, letting remote attackers execute scripts, exploit requires no special privileges.

Severity & Score

Impact

Remote attackers can execute scripts in users' browsers, potentially stealing cookies or performing actions on behalf of users.

Mitigation

Update to the latest version or apply patches that sanitize input in Complaint Form Page.

References

• https://github.com/Xmyronn/Stored-Cross-Site-Scripting-XSS-in-Coaching-Management-System.git
• https://vuldb.com/submit/802264
• https://vuldb.com/vuln/359822
• https://vuldb.com/vuln/359822/cti
• https://code-projects.org/

Related Resources

• Vulnerability Intelligence Dashboard
• Credential Scanner