CVE-2026-7222-XSS

教练管理系统中的存储型跨站脚本（XSS）漏洞导致账户劫持 产品 基于 PHP 的教练管理系统（Code-Projects.org） https://code-projects.org/coaching-management-system-in-php-with-source-code/ 受影响组件 /modules/student/complaint.php（投诉提交） /modules/admin/incomingcomplaint.php（投诉查看） 投诉回复功能（管理员/教师 → 学生） 版本 未知（供应商未提供版本信息；测试基于截至2026年4月 Code-Projects.or...

📄 Coaching Management System 1.0 Cross Site Scripting

Coaching Management System version 1.0 suffers from a persistent cross site scripting vulnerability. Stored Cross-Site Scripting XSS in Coaching Management System Leads to Account Takeover --- Product Coaching Management System in PHP Code-Projects.org...

CVE-2025-63611

Cross-Site Scripting in phpgurukul Hostel Management System v2.1 user-provided complaint fields Explain the Complaint submitted via /register-complaint.php are stored and rendered unescaped in the admin viewer /admin/complaint-details.php?cid=. When an administrator opens the complaint, injected...

CVE-2025-63611

The phpgurukul Hostel Management System v2.1 is vulnerable to Stored Cross-Site Scripting (XSS) . The application fails to properly encode user-provided input from the 'Explain the Complaint' field submitted via the /register-complaint.php endpoint. This malicious content is subsequently rendered...

pissedconsumer.com XSS vulnerability

Vulnerable URL: http://www.pissedconsumer.com/post-complaint.html Details: Description| Value ---|--- Patched:| Yes, at Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 12274 Google Pagerank| 4 VIP website status:| Yes Check pissedconsumer.com SSL connection:| Grade:...