CVE-2026-7229-SQLI

Inyección SQL Autenticada en Coaching Management System Permite el Volcado de la Base de Datos Descripción Existe una vulnerabilidad de Inyección SQL en el Coaching Management System en PHP. El parámetro complaintreply en la funcionalidad de respuesta del administrador no se sanitiza correctament...

CVE-2026-7222-XSS

Cross-Site Scripting XSS Almacenado en el Sistema de Gestión de Coaching Permite la Toma de Control de la Cuenta Producto Sistema de Gestión de Coaching en PHP Code-Projects.org https://code-projects.org/coaching-management-system-in-php-with-source-code/ Componentes Afectados...

CVE-2026-57397

Unauthenticated Cross Site Scripting XSS in Coaching = 3.9.2 versions...

CVE-2026-57397

Summary: CVE-2026-57397 describes an unauthenticated Cross Site Scripting (XSS) vulnerability in the WordPress Coaching theme, affected versions <= 3.9.2. Affected product/component: WordPress Coaching theme (WordPress plugin/theme). Root cause / vulnerability type: Cross Site Scripting (XSS);...

CVE-2026-57397 WordPress Coaching theme <= 3.9.2 - Cross Site Scripting (XSS) vulnerability

Unauthenticated Cross Site Scripting XSS in Coaching = 3.9.2 versions...

EUVD-2026-48167

Unauthenticated Cross Site Scripting XSS in Coaching = 3.9.2 versions...

CVE-2026-57397 WordPress Coaching theme <= 3.9.2 - Cross Site Scripting (XSS) vulnerability

Unauthenticated Cross Site Scripting XSS in Coaching = 3.9.2 versions...

PT-2026-63825

Unauthenticated Cross Site Scripting XSS in Coaching = 3.9.2 versions...

CVE-2026-57397: Improper Neutralization of Input During Web Page Generation

Unauthenticated Cross Site Scripting XSS in Coaching = 3.9.2 versions...

Meta Files Patent for AI That Can Listen All Day and Track How You're Feeling

Meta has filed a patent application for an AI that listens to your voice throughout the day, works out how it thinks you are feeling from the way you sound, and keeps a timestamped log of every read. Each read gets pinned to the moment it happened: the time, your location, what you were doing, ev...

WordPress Coaching theme <= 3.9.2 - Cross Site Scripting (XSS) vulnerability

Cross Site Scripting XSS vulnerability discovered by dutafi in WordPress Theme Coaching versions = 3.9.2...

CVE-2026-7222

A vulnerability was determined in code-projects Coaching Management System 1.0. Affected by this vulnerability is an unknown functionality of the file /cims/modules/student/complaint.php of the component Complaint Form Page. This manipulation of the argument Complaint causes cross site scripting...

CVE-2026-7229

A vulnerability was found in code-projects Coaching Management System 1.0. This affects an unknown function of the file /cims/modules/admin/reply.php of the component POST Handler. Performing a manipulation of the argument complaintreply results in sql injection. It is possible to initiate the...

CVE-2026-7229

A vulnerability was found in code-projects Coaching Management System 1.0. This affects an unknown function of the file /cims/modules/admin/reply.php of the component POST Handler. Performing a manipulation of the argument complaintreply results in sql injection. It is possible to initiate the...

CVE-2026-7229

A vulnerability was found in code-projects Coaching Management System 1.0. This affects an unknown function of the file /cims/modules/admin/reply.php of the component POST Handler. Performing a manipulation of the argument complaintreply results in sql injection. It is possible to initiate the...

CVE-2026-7229 code-projects Coaching Management System POST reply.php sql injection

A vulnerability was found in code-projects Coaching Management System 1.0. This affects an unknown function of the file /cims/modules/admin/reply.php of the component POST Handler. Performing a manipulation of the argument complaintreply results in sql injection. It is possible to initiate the...

CVE-2026-7229

CVE-2026-7229 affects code-projects Coaching Management System 1.0. The vulnerability resides in the POST Handler for the admin reply.php function under /cims/modules/admin/reply.php, where manipulating the complaintreply argument causes SQL injection. Remote execution is possible, and the exploi...

CVE-2026-7229 code-projects Coaching Management System POST reply.php sql injection

A vulnerability was found in code-projects Coaching Management System 1.0. This affects an unknown function of the file /cims/modules/admin/reply.php of the component POST Handler. Performing a manipulation of the argument complaintreply results in sql injection. It is possible to initiate the...

EUVD-2026-25997

A vulnerability was found in code-projects Coaching Management System 1.0. This affects an unknown function of the file /cims/modules/admin/reply.php of the component POST Handler. Performing a manipulation of the argument complaintreply results in sql injection. It is possible to initiate the...

CVE-2026-7222

A vulnerability was determined in code-projects Coaching Management System 1.0. Affected by this vulnerability is an unknown functionality of the file /cims/modules/student/complaint.php of the component Complaint Form Page. This manipulation of the argument Complaint causes cross site scripting...