CVE-2026-7222
LowCVSS 3.5Exploitation Probability (EPSS)
Low risk14th percentile - higher than 14% of all known CVEs
Summary
XSS vulnerability in Coaching Management System 1.0 in file /cims/modules/student/complaint.php. Manipulation of the Complaint argument allows remote cross-site scripting. Exploit is publicly available.
Risk Assessment
Risk of session theft, redirection to malicious sites, or code execution in victim's browser.
Recommendation
Apply vendor patch; sanitize input in the Complaint argument.
Original NVD description (English source)
A vulnerability was determined in code-projects Coaching Management System 1.0. Affected by this vulnerability is an unknown functionality of the file /cims/modules/student/complaint.php of the component Complaint Form Page. This manipulation of the argument Complaint causes cross site scripting. The attack can be initiated remotely. The exploit has been publicly disclosed and may be utilized.