CVE-2022-1816: Zoo Management System Content Module cross site scripting
A vulnerability, which was classified as problematic, has been found in Zoo Management System 1.0. Affected by this issue is /zoo/admin/publichtml/viewaccounts?type=zookeeper of the content module. The manipulation of the argument adminname with the input <script>alert(1)</script> leads to an authenticated cross site scripting. Exploit details have been disclosed to the public.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2022-1816?
The severity of CVE-2022-1816 is medium with a score of 5.4.
Which software version is affected by CVE-2022-1816?
Zoo Management System version 1.0 is affected by CVE-2022-1816.
What is the vulnerability type of CVE-2022-1816?
The vulnerability type of CVE-2022-1816 is cross-site scripting (XSS).
How can I exploit CVE-2022-1816?
To exploit CVE-2022-1816, you can manipulate the 'admin_name' argument with malicious input.
Is there a fix available for CVE-2022-1816?
At the moment, there is no official fix available for CVE-2022-1816. It is recommended to apply any relevant security patches or updates provided by the vendor.