PHPGurukul Complaint Management System Cross-Site Scripting Vulnerability in Version 2.0

A reflected cross-site scripting vulnerability has been identified in PHPGurukul Complaint Management System version 2.0. The issue resides in the file '/admin/complaint-search.php', where user input from the 'search' parameter is echoed back without proper sanitization. This vulnerability can be exploited remotely, but it requires user interaction.

Impact

Exploitation of this vulnerability allows for reflected cross-site scripting, where an attacker can inject malicious scripts that are executed in the context of the user's browser.

Reproduction

To reproduce this vulnerability, send a POST request to '/admin/complaint-search.php' with a 'search' parameter containing a script tag, such as one including JavaScript code like 'alert(document.cookie)'.