CVE-2022-31897

SourceCodester Zoo Management System 1.0 is vulnerable to Cross Site Scripting (XSS) via the msg parameter in the register_visitor script. An attacker can inject malicious JavaScript code that will be executed in the victim's browser.

The risk includes potential session hijacking, redirection to malicious sites, or other actions within the victim's session context, leading to confidentiality and integrity breaches.

Immediately update the system to the latest version or apply a security patch. In the meantime, implement input filtering and sanitization, especially for the msg parameter.