Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Bracketweb Zeinet zeinet allows Reflected… (CVE-2026-93951)

This vulnerability in Bracketweb Zeinet (versions up to 1.0.0) is due to improper input neutralization during web page generation, leading to reflected cross-site scripting (CWE-79). An attacker can craft malicious input that is reflected in the web page without proper sanitization, potentially enabling script execution in the victim's browser. The CVSS 3.1 vector indicates network attack vector, low attack complexity, no privileges required, user interaction required, scope changed, and impacts on confidentiality, integrity, and availability.

Successful exploitation can lead to execution of arbitrary scripts in the context of the victim's browser, potentially resulting in information disclosure, session hijacking, or other impacts on confidentiality, integrity, and availability as indicated by the CVSS vector. There are no known exploits in the wild at this time.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until a fix is available, users should apply standard mitigations for reflected XSS such as input validation and output encoding on affected inputs, and consider employing web application firewalls or other protective controls.