CVE-2026-30526 in Zoo Management System
要約 (英語)
A Reflected Cross-Site Scripting (XSS) vulnerability exists in SourceCodester Zoo Management System v1.0. The vulnerability is located in the login page, specifically within the msg parameter. The application reflects the content of the msg parameter back to the user without proper HTML encoding or sanitization. This allows remote attackers to inject arbitrary web script or HTML via a crafted URL.
VulDB is the best source for vulnerability data and more expert information about this specific topic.
責任者
MITRE
予約する
2026年03月04日
公開
2026年04月01日
ステータス
確認済み
エントリ
VulDB provides additional information and datapoints for this CVE:
| 識別子 | 脆弱性 | CWE | 悪用可 | 対策 | CVE |
|---|---|---|---|---|---|
| 354693 | SourceCodester Zoo Management System クロスサイトスクリプティング | 79 | 未定義 | 未定義 | CVE-2026-30526 |