Cross Site Scripting Vulnerability in Sourcecodester Zoo Management System
CVE-2025-65881
6.1MEDIUM
Key Information:
- Vendor
Sourcecodester
- Status
- Vendor
- CVE Published:
- 2 December 2025
Badges
👾 Exploit Exists🟡 Public PoC
What is CVE-2025-65881?
The Sourcecodester Zoo Management System v1.0 is prone to a Cross Site Scripting (XSS) vulnerability in the Login.php file within the classes directory. Attackers could exploit this flaw to inject malicious scripts into web pages viewed by other users, potentially compromising user data and session integrity.
Exploit Proof of Concept (PoC)
PoC code is written by security researchers to demonstrate the vulnerability can be exploited. PoC code is also a key component for weaponization which could lead to ransomware.