CVE-2026-7222: code-projects Coaching Management System Complaint Form complaint.php cross site scripting
A vulnerability was determined in code-projects Coaching Management System 1.0. Affected by this vulnerability is an unknown functionality of the file /cims/modules/student/complaint.php of the component Complaint Form Page. This manipulation of the argument Complaint causes cross site scripting. The attack can be initiated remotely. The exploit has been publicly disclosed and may be utilized.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2026-7222?
The severity of CVE-2026-7222 is classified as Medium due to its potential for cross-site scripting attacks.
How do I fix CVE-2026-7222?
To fix CVE-2026-7222, ensure proper output encoding and sanitization of user inputs in the complaint.php file.
What products are affected by CVE-2026-7222?
CVE-2026-7222 affects the Code-Projects Coaching Management System version 1.0.
What type of vulnerability is CVE-2026-7222?
CVE-2026-7222 is identified as a cross-site scripting (XSS) vulnerability.
Is there a workaround for CVE-2026-7222?
A temporary workaround for CVE-2026-7222 is to disable or restrict access to the affected complaint.php functionality.