VYPR
← All advisories
Medium severity6.1NVD Advisory· Published Apr 1, 2026· Updated May 10, 2026

CVE-2026-30526

CVE-2026-30526

Description

A Reflected Cross-Site Scripting (XSS) vulnerability exists in SourceCodester Zoo Management System v1.0. The vulnerability is located in the login page, specifically within the msg parameter. The application reflects the content of the msg parameter back to the user without proper HTML encoding or sanitization. This allows remote attackers to inject arbitrary web script or HTML via a crafted URL.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

2
  • Pushpam02/Zoo Management System2 versions
    cpe:2.3:a:pushpam02:zoo_management_system:1.0:*:*:*:*:*:*:*+ 1 more
    • cpe:2.3:a:pushpam02:zoo_management_system:1.0:*:*:*:*:*:*:*
    • (no CPE)range: = 1.0

Patches

Vulnerability mechanics

References

1

News mentions

0

No linked articles in our index yet.