CVE-2022-33075

A stored cross-site scripting (XSS) vulnerability in the Add Classification function of Zoo Management System v1.0 allows attackers to execute arbitrary web scripts or HTML via unspecified vectors.

CVSS v3.1 NVD

5.4 MEDIUMCVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N

CVSS v2.0 NVD

3.5 LOWAV:N/AC:M/Au:S/C:N/I:P/A:N

EPSS

0.64% chance of exploitation in the next 30 days, 49th percentile

Published

2022-07-05

Updated

2026-07-09

Proof-of-concept exploits (2)

• https://packetstormsecurity.com/files/167603/Zoo-Management-System-1.0-Cross-Site-Scripti…
• AngeloPioAmirante/CVE-2022-330750★ · 2022-07-16

References

• CVE Record
• NVD entry

Related

• CVE-2022-31897
• CVE-2022-35899
• CVE-2023-24317