CVE-2022-31914: XSS
Zoo Management System v1.0 is vulnerable to Cross Site Scripting (XSS) via zms/admin/publichtml/saveanimal?anid=24.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2022-31914?
The severity of CVE-2022-31914 is medium with a CVSS score of 5.4.
How does CVE-2022-31914 affect Zoo Management System v1.0?
CVE-2022-31914 affects Zoo Management System v1.0 by allowing Cross Site Scripting (XSS) attacks through the 'save_animal' functionality.
How can I fix CVE-2022-31914 in Zoo Management System v1.0?
To fix CVE-2022-31914 in Zoo Management System v1.0, you should update to a patched version of the software or apply any recommended security patches provided by the vendor.
What is Cross Site Scripting (XSS)?
Cross-Site Scripting (XSS) is a type of security vulnerability that allows an attacker to inject malicious scripts into web pages viewed by other users.
What is the Common Weakness Enumeration (CWE) ID for CVE-2022-31914?
The Common Weakness Enumeration (CWE) ID for CVE-2022-31914 is CWE-79, which represents Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting').