CVE-2025-7408

CVE-2025-7408 affects SourceCodester Zoo Management System 1.0. The vulnerability is triggered by manipulating the msg parameter in /admin/templates/animal_form_template.php, causing cross-site scripting and allowing remote initiation. Public exploit information exists. Remediation guidance from ...

CVE-2026-30526

A Reflected Cross-Site Scripting (XSS) vulnerability exists in SourceCodester Zoo Management System v1.0 . The flaw is located in the login page specifically within the msg parameter , where the application fails to perform proper HTML encoding or sanitization on the input. This allows remote att...