Threats affecting pkg:github/xmyronn/Stored-Cross-Site-Scripting-XSS-in-Coaching-Management-System

CVE-2026-7222 is a medium severity cross-site scripting (XSS) vulnerability in version 1.0 of the code-projects Coaching Management System. The vulnerability exists in an unspecified functionality of the /cims/modules/student/complaint.php file within the Complaint Form Page component. It allows remote attackers to inject malicious scripts via manipulation of the Complaint argument. The vulnerability has been publicly disclosed, but no official patch or remediation guidance is currently available. Exploits are not known to be observed in the wild at this time.