CVE Catalog

CVE-2022-33075

MediumCVSS 5.4
Published: Updated: Translated: NVD NIST

Exploitation Probability (EPSS)

Low risk
0.59%

44th percentile - higher than 44% of all known CVEs

Summary

A stored cross-site scripting (XSS) vulnerability in the Add Classification function of Zoo Management System v1.0 allows attackers to execute arbitrary web scripts or HTML via unspecified vectors.

Risk Assessment

Attackers can hijack user sessions, steal data, or spread malicious content within the organization.

Recommendation

Update the system to the latest version and implement input filtering and validation in the Add Classification function.

Original NVD description (English source)

A stored cross-site scripting (XSS) vulnerability in the Add Classification function of Zoo Management System v1.0 allows attackers to execute arbitrary web scripts or HTML via unspecified vectors.

Vulnerability data from NVD (NIST) · CISA KEV · EPSS